In the last couple of weeks, I’ve started receiving some scam invoices and I thought I’d share so people will know about this scam and what you need to do.
Here’s how the scam goes. You get a very real invoice in your inbox sent through PayPal. The invoice is purportedly from GoDaddy. It has the GoDaddy logo and is for domains that you actually own. It looks really legit.
You click on the View and Pay Invoice button, and see the invoice. You can login to your account and the invoice is there. Here’s one I got today.
I did in fact recently renew this domain with a few others, and the amount I paid was almost exactly what this invoice is for. However, look at the note at the bottom. The domain it lists is not the same as the one from above (that I blurred out) and it’s not a domain I own. That was my tip off.
So first I logged into my GoDaddy account to see what was going on. The domains that I’m being invoiced for were already paid this month, by credit card not PayPal. And that’s another tip off. I normally pay for all my domains via credit card not PayPal, although it’s not unheard of for me to use PayPal. But it was definitely not right.
So I checked my GoDaddy account and the domains had been paid. So I figured it was just a spoofed or fake email and had planned to just delete it.
But then on a hunch I logged into my PayPal account, and low and behold, I can see two unpaid invoices that match the two emails I got.
Obviously, the invoice is not showing from GoDaddy on this screen, but if you click the invoice, they do have the GoDaddy logo and show domain names I own.
So basically a scammer is sending real invoices through PayPal for domains you own, making it legit seem like something you need to pay. And since it’s a real invoice right in your PayPal account, if you send them payment, they get the money.
What should you do?
Pay attention to where the emails are coming from and how you typically pay for your domains. I normally pay via credit card, so the PayPal invoice was a new one. But it looked legit enough that I had to check into it.
If you get it, don’t pay it, obviously, and report it to PayPal. You can report it to GoDaddy if you want, but since their system isn’t actually involved (just someone claiming to be them) there’s not much they can do.
Change your domain registration to private
The reason you are likely getting these is because scammers are looking at domain ownership information. They can see renewal dates, your name and info, and your domain registrar in the WHOIS database if it’s not private. It’s really obnoxious that you have to pay extra for the private service and if you don’t, you have to deal with this. 🙁
Amy Masson
Amy is the co-owner, developer, and website strategist for Sumy Designs. She's been making websites with WordPress since 2006 and is passionate about making sure websites are as functional as they are beautiful.
Good Lord!
These scammers are everywhere, recently i got an email claiming to have rights to images published on my sites which were in fact licensed and bought from stock photos. They threatened me of legal consequences and asked me to pay the amount via PayPal. I never communicated with them ever and eventually after a few days they stopped. One thing to note here is that they are targeting naive people. If you are aware and vigilant you can spot them and dodge them.
Me too! I knew it wasn’t legit because I haven’t used Paypal in about 2 years!
Thanks. I received one as well, and it looked almost legit except I didn’t recognize the user name. Similar scenario as yours, and these are a bit tricky because they get through spam catchers Google has in place.