How can I recognize phishing emails and fake payment requests?

If you have received a suspicious email or payment request, carefully check the message before clicking on links, opening attachments, or making a payment.

Important: Do not click on any links or open any attachments if you find an email suspicious. Instead, log in directly to your customer account via the easyname website.

Table of Contents

Check payment status in the customer account

The safest way is to check directly in your customer account.

Open the easyname website manually in your browser and log in to your customer account. Do not use any link from the suspicious email.

Then check whether there is an outstanding payment, an upcoming renewal, or any other relevant payment notice displayed in the customer account.

  • In the CloudPit, check outstanding invoices under My CloudPitInvoices.
  • In the Controlpanel, check your balance and upcoming renewals under Account as well as for the respective product. Invoices in the Controlpanel are only created after payment or after purchase or renewal.
Note: If there is no corresponding outstanding invoice visible in CloudPit, or no corresponding upcoming renewal, no missing balance, and no relevant payment notice visible in the Controlpanel, treat the email as suspicious for the time being.

How can I recognize a genuine payment request?

A genuine payment request should match your customer account and your products.

Pay special attention to the following points:

  • The email refers to a product that is actually present in your customer account.
  • Customer number, product data, or term details match your customer account.
  • The outstanding invoice is directly visible in the customer account in CloudPit.
  • In the Controlpanel, the message matches an upcoming renewal or missing balance.
  • The email does not ask you to use unusual payment methods.
  • Links do not lead to foreign or unusual domains.

An email should not be classified as genuine solely based on the displayed sender. Sender addresses can be forged.

Typical warning signs of phishing or spam

The following points can indicate a forged or suspicious email:

  • Unusual or deviating sender
  • Pressure or threat of immediate suspension
  • Foreign or unexpected payment data
  • Unusual links or shortened URLs
  • Unexpected attachments
  • Spelling mistakes or atypical phrasing
  • Products, invoices, or customer data do not match your customer account
Important: Do not transfer money to payment data from a suspicious email. Always check outstanding amounts directly in your customer account.

What should I do if I am unsure?

Log in directly to your customer account via the easyname website and check there whether a payment is outstanding.

If an outstanding invoice is displayed in CloudPit, use the payment options directly in CloudPit.

If an upcoming renewal is displayed in the Controlpanel, check the required balance or use the payment options offered in the Controlpanel.

If no corresponding outstanding payment, no upcoming renewal, or no relevant payment notice is displayed in the customer account, do not click any links in the email and do not open any attachments.

Have a suspicious email checked

If you are still unsure, you can have the suspicious email checked by our support.

To do this, send the complete mail header or the email as a .eml file to support@easyname.com.

You can find instructions here: How can I read the mail header or export an email?