Domain Name Services Expiration Notice
Internet Domain owners may receive an invoice from Domain Name Services or a similar-sounding company via the US Postal Service. The letter warns you that your domain name is about to expire and urges you to renew and transfer it by paying a fee. This scam tries to trick you into paying for a service you don't need and a transfer you don’t want. This is phishing using the USPS.
How Does this Con Work?
These disreputable companies mail a message that looks legitimate and urgent. It uses a name and logo that appear official and sound vaguely familiar. It lists your domain name, uses official-looking phrases and references, such as terms and the period covered, and includes a credit card form.
Below are two examples of these dubious solicitations.
They are careful to avoid outright mail fraud by including disclaimers like “this notice is not a bill” and “you are under no obligation” scattered in the body of the letter. Still, they intend to fool your busy accounts payable department into paying for something you don’t need.
We receive a flurry of calls and messages from our clients whenever a batch of these direct mail "Domain Name Services Expiration Notices" goes out. The one I got in today’s mail triggered this updated warning blog.
Domain web hosting, DNS hosting, domain name hosting, and mail hosting come with charges from multiple vendors. It's confusing and easy to get tricked.
How can you protect yourself from scams?
Take steps to avoid falling for this and similar phishing scams. Here are our tips:
Confirm that the sender is an established vendor to your organization.
Always check the sender's email address and the website's domain name for emails. If they don't match your registrar's name or if they use a generic or free email service, be suspicious.
Don't click on links or attachments in the message. Instead, go directly to your registrar's website and log in to your account. You can check the status and expiration date of your domain name there.
Don't pay for any service that you didn't request or that you don't recognize. If you have any doubts, contact your registrar's customer support and verify the message's authenticity.
Our clients should not hesitate to contact our HelpDesk whenever they receive an unusual or suspicious email, text message, phone call, or letter.
Does your organization need an IT Support Provider to look out for your security? Contact Slingshot today for a no-charge review.