Why Did LinkedIn Still Email Me After I Reported a Phishing DM and Blocked the User?
The email was likely queued before you reported and blocked. Blocking stops future contact but may not cancel a scheduled notification. See next steps.
If you reported a suspicious LinkedIn direct message, blocked the sender, and still got an email notification hours later, your reaction is fair: why is that still happening? It feels backward. You already did the right thing, and yet the platform still surfaces the interaction in your inbox like nothing happened.
If this has happened to you, you are not overreacting. A lot of people are seeing more phishing attempts on LinkedIn, especially through DMs that include fake job offers, suspicious calendar links, file download prompts, or messages that try to move the conversation off-platform too quickly. So if you are getting phishing links weekly, the bigger question is not just “why did LinkedIn send that email?” but also “what should I do next, and how do I reduce the chances of this happening again?”
Let’s break it down in a simple way.
What probably happened here?
In most cases, LinkedIn’s email notification system and its in-app moderation system do not always work in perfect real time. That means a few things may have happened behind the scenes:
- The email was already queued before you reported the message or blocked the sender.
- Notification systems can lag, especially if the message triggered an automated email quickly.
- Blocking a user stops future interaction, but it may not cancel an already scheduled notification email.
- Reporting and enforcement are separate actions. Reporting tells LinkedIn to review the account or message, but that review may not happen instantly.
So yes, it is frustrating, but it does not necessarily mean LinkedIn ignored your report. It may simply mean the notification pipeline was already in motion.
Once you're back in, make your profile count
Paste your profile link and see your score right away, with clear fixes for your headline, About section and experience. No account needed.
Or open the LinkedIn profile evaluator
Is this a security failure?
It is more accurate to call it a notification and moderation gap than a full security failure. Still, from a user experience perspective, it absolutely feels like a failure. If someone sends you a phishing link and you take immediate action, you reasonably expect the platform to stop amplifying that message in any form, including email.
That expectation makes sense because phishing is not just annoying. It can lead to:
- Credential theft
- Fake job scams
- Malware downloads
- Identity fraud
- Business impersonation
According to guidance from the U.S. Federal Trade Commission, phishing messages often try to create urgency, ask you to click a link, or push you to share private information. LinkedIn phishing attempts tend to follow the same pattern, just dressed up as networking, recruiting, or professional collaboration.
Why are phishing DMs becoming so common on LinkedIn?
That part is unfortunately easy to explain. LinkedIn is full of public professional data. Scammers love environments where they can quickly identify:
- Job seekers
- Recruiters
- Founders
- Salespeople
- Freelancers
- Marketing teams
These groups are more likely to engage with cold outreach, which makes the platform attractive for bad actors. A phishing DM on LinkedIn might pretend to be:
- A recruiter with a “confidential role”
- A brand collaboration request
- An event invitation
- A file containing a proposal or brief
- A lead generation opportunity
- A request to verify your account or view a secure document
If the link looks slightly off, if the language feels generic, or if the sender is pushing for a click before offering context, that is your sign to slow down.
What should you do immediately after getting a phishing DM?
If this happens again, here is a practical response checklist:
- Do not click the link.
- Report the message inside LinkedIn.
- Block the sender.
- Delete the conversation if you do not need it.
- Check the sender’s profile for signs of impersonation, like very new activity, vague job history, stock-image profile photos, or strange language.
- If you clicked the link, change your password immediately and turn on two-factor authentication.
- Review your device and browser activity if you downloaded anything.
LinkedIn also provides official support resources around reporting suspicious activity and scams. Their help pages are worth bookmarking if this keeps happening.
How can you reduce phishing messages on LinkedIn?
You may not be able to stop all of them, but you can lower your exposure.
1) Review your messaging and visibility settings
Ask yourself:
- Who can message you?
- Are your email notifications turned on for too many message events?
- Is your profile exposing contact details publicly?
LinkedIn’s privacy settings let you manage visibility and communications. Tightening those controls will not eliminate scams, but it can reduce noise.
2) Turn on two-step verification
This is one of the easiest ways to add a layer of protection. If a phishing attempt ever captures your password, two-step verification can help stop account access. LinkedIn explains this in its account security resources, and broader security guidance from the Google Account Help page on 2-Step Verification is also useful.
3) Be skeptical of urgency
Most phishing messages want speed. They want you to click before you think. So when a DM says things like:
- “Please review urgently”
- “You were selected”
- “Confirm your details now”
- “Open this secure file”
pause for a minute. Real professionals usually provide context first.
4) Verify outside the message
If someone claims to represent a company, go to the company website directly. Do not use the link they sent. If it is a recruiter, check whether they have a real profile history and whether the company lists the role publicly.
5) Train your team if you manage a brand page
This matters even more if multiple people use LinkedIn on behalf of a company. One careless click can become a bigger issue if account access, page roles, or internal conversations are involved.
What about the delayed email notification itself?
It is reasonable to want that fixed. From a product standpoint, LinkedIn should ideally suppress or retract message notifications tied to accounts that have just been reported for phishing or blocked by the recipient. That would create a better trust and safety experience.
If you want to push the issue further, consider:
- Submitting feedback to LinkedIn support
- Documenting the timeline with screenshots
- Checking whether the email included a direct unsubscribe or notification preference option
- Adjusting your message email notifications in settings
If enough users report the same problem, platforms are more likely to refine how those systems work.
How should professionals and brands think about this long term?
There is also a bigger lesson here. LinkedIn is still one of the best places for B2B networking, employer branding, recruiting visibility, and thought leadership. But that only works well when users feel safe engaging on the platform.
So whether you are an individual user, a founder, or a marketing team, it helps to ask:
- Do we have a clear process for suspicious messages?
- Does everyone on the team know what a phishing attempt looks like?
- Are our brand representatives being targeted with fake outreach?
- Are we balancing visibility with account safety?
That combination matters. Growth on LinkedIn is great, but secure growth is better.
A simple bottom line
If LinkedIn emailed you about a phishing DM after you had already reported and blocked the sender, the most likely explanation is that the email notification was already generated before your actions took effect. That does not make it any less annoying, and it does point to a gap in how platform notifications and abuse controls work together.
The good news is that your immediate steps were correct: report, block, avoid clicking, and review your security settings. If phishing DMs are becoming frequent, now is a good time to tighten your notification preferences, strengthen your account security, and stay cautious with cold outreach that includes links.
If you want a deeper look at social engineering tactics, this video from Computerphile on YouTube is a helpful place to start, and the FTC phishing guide is worth keeping handy.
And if your team is trying to grow on LinkedIn while also dealing with trust, safety, outreach quality, and brand credibility concerns, this is exactly the kind of thing that deserves a more thoughtful approach. At EXEED Digitals, we regularly support brands that want to build stronger, safer, and more credible LinkedIn visibility. You can learn more about their services here: EXEED Digitals Services. As a LinkedIn agency, EXEED Digitals usually helps with these kinds of concerns by improving messaging strategy, profile credibility, page growth, and outreach systems that feel more human and less risky. Their LinkedIn services have helped 100s of brands on LinkedIn, especially businesses that want steady growth without losing trust along the way.
en
