Running into issues on Fiverr? Use this board to troubleshoot and share issues with the community

Support & Troubleshooting

Recently, I had an unpleasant experience.
 
I was abruptly logged out across all devices, website, mobile, and app. Shortly after, I received an unexpected email titled “Reset Your Password Request,” which I hadn’t initiated.

This “scam” involves someone using the email linked to your Fiverr account to trigger a password reset request.
 
After some research, I found that other sellers have faced the same issue, this seller made a video about it: 

https://www.youtube.com/watch?v=m80ioZkL8So


 
Here is a thread where multiple users experienced this: 

https://community.fiverr.com/forums/topic/339448-mfa-requirement-for-password-reset-feature-request/

This raises serious security concerns from my point of view:

Have emails associated with Fiverr accounts been exposed?

 Was there a data breach? I don’t see any other possibility in which external people will know the email associated with Fiverr accounts.

Why does simply knowing someone’s email allow anyone to trigger a logout?

 This vulnerability lets someone repeatedly send reset requests, potentially overwhelming users.

The current 2FA method is not secure enough and outdated

The current 2FA options (phone number or email) are outdated. Text messages are not encrypted and can be intercepted. SIM swapping is also common nowadays. 

Modern security standards recommend stronger options, like authenticator apps (e.g., Google Authenticator) or security keys, which offer better protection against unauthorized access.

Fiverr accounts hold sensitive information and earnings. The current 2FA is inadequate for this type of data. 

Allow users to select the 2FA they want to enable

 and give the ability to disable the unwanted ones

: Add a lock for critical settings, especially for security options and withdrawal methods. With a setting lock, any change would trigger a waiting period (e.g., one day) before being able to do the change. This prevents unauthorized changes to the account even if someone accesses the account.

: We are not able to create a ticket to customer support in case we lose access to our accounts as we need to be logged in to create a ticket. There should be a way to reach support for these emergency concerns.

The number of scams has drastically increased in a few months, now there is not one day where I don’t receive a scam/spam in my inbox, there is a need for better account protection.

Improving Fiverr Accounts Security

Home

Forum

Events

Content

People

Contributors

Albums

Clubs

Chat

Channels

Tools

Help

A home for meaningful connections, peer support, and professional growth.

Fiverr Community

Login to the Fiverr Community community to connect with others, attend community events, and more!

Login or Sign Up for even more

To unlock all parts of the community and get the best experience, complete your profile.