Jameson Lopp Flags Google Forms Email Phish and Lists 5 Channels to Distrust

Bitcoin developer Jameson Lopp warned crypto holders on May 17, 2026 to adopt a “zero trust” stance toward incoming communications after a phishing method abused Google Forms notifications. He said attackers can use official-domain emails, oversized text fields, and Google Sites-hosted pages to make fake security alerts look legitimate. Lopp listed five channels he would no longer trust for inbound messages: email, phone calls, SMS, messengers, and other external notifications.