We've received a dozen verification-code emails for current and former employees, and I also received one at a personal address. The messages appear to be legitimate TikTok Shop account-verification emails and contain a six-character alphanumeric code. My theory is that someone is automating account signups with large lists of email addresses and possibly guessing codes, hoping to create accounts linked to addresses they don't control. Has anyone else seen this, and is there a known explanation?
2 Answers
The account-creation theory is believable: someone could submit large numbers of addresses and let the legitimate owners receive the codes. Even if almost every attempt fails, a large enough batch might produce an account tied to an address the attacker doesn’t own. Another possibility is that TikTok sends these messages during login or recovery attempts, so the exact trigger would need to be confirmed by examining the message details.
Several people have reported seeing these, including messages sent to old, rarely used, or former business addresses. That pattern makes automated signup activity seem plausible, although it doesn’t prove the verification codes are being guessed successfully.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures