> ## Content Index
> Fetch the complete content index at: https://www.ffgrv.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# 🚨 SECURITY ALERT: Active Phishing Campaign Targeting Caleb & Brown Accounts
- URL: https://www.ffgrv.com/security-alert-active-phishing-campaign-targeting-caleb-brown-accounts/
- Published: 2026-06-02T18:51:02.000Z
- Updated: 2026-06-04T03:41:50.000Z
- Description: We have confirmed an active phishing operation targeting members of this community who hold accounts with Caleb & Brown.
- Author: Jordan Finneseth
- Tags: All Members, Community Update, Community Alert, Caleb & Brown, brokerage, phishing, Scam

We have confirmed an active phishing operation targeting members of this community who hold accounts with **Caleb & Brown**.

**What's Happening**

Two fraudulent emails are circulating, impersonating Caleb & Brown's official communications:

- **Email 1** claims your account requires a "verification step" and links to a fraudulent website.

![](https://storage.ghost.io/c/a6/c8/a6c8eafd-5068-40f4-b1f4-ce600be5c7b3/content/images/2026/06/1-1.png)

- **Email 2** claims you must register "trusted self-custodial wallets" or face account restrictions by a specific date, linking to a separate fraudulent link:

![](https://storage.ghost.io/c/a6/c8/a6c8eafd-5068-40f4-b1f4-ce600be5c7b3/content/images/2026/06/2.png)

**How to Spot It**

The tell is in the sender address. These emails are **not** originating from Caleb & Brown servers.

One confirmed fraudulent sender: [**info@xhair.eu**](mailto:info@xhair.eu)**. There will likely be more, as scammers are know to hop from email to email.** 

Legitimate Caleb & Brown communications will never come from a third-party domain. If the sender address does not end in `@calebandbrown.com`, treat it as compromised.

**What to Do**

- ✅ Do **not** click any links in these emails
- ✅ Do **not** enter credentials or wallet addresses on these sites
- ✅ Log in to your Caleb & Brown account **directly** via your browser — never through an emailed link
- ✅ If you've already clicked, contact Caleb & Brown support immediately through their official website
- ✅ Forward suspicious emails to Caleb & Brown's security team for tracking

**Why This Matters**

This is a targeted attack. The urgency framing ("mandatory," "account restricted," specific deadlines) and near-identical branding are deliberate pressure tactics designed to bypass your judgment. They work because they look real under casual inspection.

Slow down. Verify the sender. Never act on financial account instructions delivered via unsolicited email.

*If you've received either of these emails, please flag it in the comments so we can track the scope. Stay sharp.*