A new phishing campaign targeting users of Robinhood is blurring the line between real and fake to a dangerous degree—leveraging a little-known quirk in Gmail to deliver attack emails that appear completely authentic, down to passing all standard security checks.

Hackers used Gmail’s dot handling trick and a flaw in Robinhood’s account setup to send fake login alert emails that looked real. The emails came from Robinhood’s own system and tricked some users into clicking phishing links and entering sensitive details on fake websites.

Robinhood has received in-principle approval from Singapore’s MAS to move closer to offering brokerage services, including trading, custody and investment products. It still needs to meet regulatory conditions before it can officially launch in the country.

Jinse Finance launches its cryptocurrency and blockchain industry daily news report, "Jinse Morning 8," issue 3025, providing you with the latest and fastest news on the digital currency and blockchain industry.

Is Robinhood Chain a super gateway to tokenized stocks, or a compliance silo?

For Robinhood, the real test is not the records in a bull market, but the floors in a bear market.