We are investigating reports of phishing attempts via Substack DMs. Please be cautious with any links you receive in DMs, and remember that Substack will never ask you for login information via a direct message. We encourage publishers to enable two-factor authentication and account security questions, which you can do here:

support.substack.com/hc…