Crypto Accounts Face New Email Threats

Singapore authorities have issued a warning about a growing cybercrime trend in which criminals gain unauthorised access to cryptocurrency accounts after taking control of victims' email accounts.

The Singapore Police Force said the number of reported cases has increased since the middle of August 2026, raising concerns about the security of both email and cryptocurrency accounts.

Previous Data Leaks May Be Linked

Police investigations indicate that some of the email accounts involved had already been exposed in data breaches affecting other online services.

This suggests that criminals may be taking advantage of login information that was leaked previously. The risk becomes greater when people use identical passwords for several websites and online platforms.

Reused Passwords Create an Entry Point

According to police, attackers may try previously exposed email credentials against cryptocurrency services. Once an email account is compromised, criminals can potentially discover which crypto exchanges or platforms the victim uses.

Using one password across multiple services can therefore turn an old data breach into a new security problem.

Criminals Can Hide Their Activity

After gaining access to an email account, attackers may look for messages containing information about cryptocurrency services.

Police said criminals could also manipulate inbox settings by creating rules that automatically archive, forward or remove certain messages. Such tactics can make suspicious activity harder for the account owner to notice.

Password Recovery Can Be Abused

Once attackers identify a cryptocurrency account, they may attempt to trigger its password recovery process.

Reset links, one-time codes and verification messages sent through the compromised email account could then be intercepted, potentially allowing criminals to take control of the associated crypto account.

H6: Stronger Account Protection Is Essential

The warning highlights the importance of using different passwords for different online services. A password exposed in an earlier breach should never be treated as safe for another account.

Keeping email accounts well protected is particularly important because they are often connected to password recovery and security verification systems for other services, including cryptocurrency platforms.