MoonPay possibly infiltrated? Received targeted scam 5 hours after login.

Hi everyone,

I wanted to share a strange experience I had yesterday to warn others, especially those new to the space.

What happened: I logged into my MoonPay account yesterday for the first time in a few years to download my transaction history. Everything seemed fine on the site itself. However, exactly 5 hours later, I received an email that raised some serious red flags.

The details of the email:

• Sender: The email claimed to be "MoonPay Support" but the address was from info at tartecosmetics(dot)com (a makeup brand).
• Message: It claimed there was a "security incident" and that I needed to call a US-based phone number immediately.
• The Hook: It didn't contain any links, just the instruction to call that number (which is a classic Vishing or Voice Phishing tactic).

Why I am posting this: I find the timing very concerning. Receiving a targeted scam email from a third-party domain just 5 hours after interacting with my account feels like more than just a coincidence.

I’ve also seen reports from other crypto users (specifically Uphold users) receiving identical emails from this same cosmetics brand domain. This leads me to wonder if a third-party service used by these platforms (like a support or mailing tool) might be compromised, or if there is some other form of infiltration.