PSA: Watch out for BrickLink phishing emails

BrickLink is warning users that some members are receiving phishing emails from scammers hoping to steal their login information, and has offered advice on how to secure your account.

In an email sent out to current users in the early hours of March 5, the secondary marketplace says that members are being targeted by emails asking them to login to ‘bricklinks.net’. “This is an attempt to get people to share their BrickLink login information,” the BrickLink team says. “Please do not try to log on from suspicious emails. There is a risk that the information will be used to illegally access your BrickLink account.”

The LEGO Group – which acquired BrickLink in 2019 – has been busy adding new security features to the platform in the midst of last year’s cybersecurity incident, including a form of two-factor authentication known as One-Time Pin (OTP). If you have this setting turned on, BrickLink will send an email with a unique code when you try to log in – preventing anyone with unauthorised access to your username and password from logging into your account.

OTP is an opt-in feature, which means it isn’t automatically turned on. But BrickLink recommends activating it, along with updating your password regularly and using unique passwords across different platforms, to ensure the security of your account. These are fairly standard practices that we should all be doing across every website – not just BrickLink – but it’s always worth a reminder, especially if you haven’t seen BrickLink’s latest email.

The secondary marketplace temporarily shut down in November 2023 after some accounts were accessed by ‘unauthorised individuals’. When the site re-opened a few days later, all members were prompted to change their passwords.

Support the work that Brick Fanatics does by purchasing your LEGO using our affiliate links.