Knowledgebase

Spotting phishing that pretends to be us

Security guidance: please read the whole article before acting.

Account & Security Security 3 views 1 min read Back

Fraudulent emails copy our name and logo to steal passwords and card details. Here is how to tell ours from theirs, and what to do with a suspicious one.

What a real message from us looks like

It comes from our own domain, which you can check in the sender's address, and links only to our own site.
It never asks for your password, a two-factor code, or full card details.
Every invoice, ticket reply and notice we send is also visible when you sign in: the emails under Account Details › Email History, the invoices under Billing, the replies under Tickets.

If a message looks wrong

Do not click its links or open its attachments.
Sign in by typing our address into the browser and check whether the invoice or ticket it mentions exists.
Forward the message to us in a ticket so we can warn other customers.

Entered your password on a page that was not ours? Change it in Security Settings straight away and turn on two-factor authentication.

security phishing email

Turn on two-factor authentication A password can be guessed or leaked. Two-factor authentication asks for a second code from your phone, so a stolen password alone is not enough. It takes two minutes. Security 3 views Read More Adding contacts and additional users A contact receives copies of your emails; a user can sign in and act on the account with the permissions you choose. Both are managed from the account menu. How-to 2 views Read More Account setup checklist Ten minutes on the day you sign up saves an hour later. Work down the list once; nothing here needs repeating. Checklist 3 views Read More How refunds and account credit work A refund goes back to the card or account it came from; a credit stays on your account and is applied to your next invoice. Reference 5 views Read More