There have been reports of users receiving phishing messages via the MetaBrainz messaging service.
Remember: MetaBrainz staff will never ask for your password. MetaBrainz staff will never ask you to log in to a third-party site (or ‘verify’ your username and password in any other way).
Staff are also likely to email you about account issues directly from an @metabrainz account rather than the user-to-user messaging service.
You can go a step further and apply these rules to every website and service… you are now 99% phishing-proof!
Below is an example of a reported phishing message. This is not a message from staff. It is an attempt to compromise a MetaBrainz account by getting a user to enter their username and password into a third-party website.
If you receive phishing attempts (or spot other scams) via MetaBrainz services please leave a comment here. There is also a thread on the community forums discussing the phishing messages.