A fake ElySpace email usually rushes you to log in or pay through a link. Check it in your client area at my.elyspace.com instead of clicking anything.
Scammers copy the look of hosting companies' emails: our logo, an invoice number, a domain name of yours from public records. The goal is your password or your money. These checks take a minute and catch almost every fake.
The quickest check: your email history
Every email we send about your account is saved in the client area. Open my.elyspace.com yourself (type it or use a bookmark, not the link in the email), log in and go to Account > Email History. If the email isn't there, we didn't send it about your account. See See the emails we have sent you.
The same works for invoices and services: an invoice we sent is listed under Billing, and the status of your hosting and domains is on their pages in the client area.
Warning signs
- It asks for a password, a 2FA code or card details. We never ask for your password, by email, phone, chat or in a ticket.
- It rushes you. "Your domain expires today", "your account will be deleted in 24 hours", "pay now to avoid suspension".
- The link goes somewhere else. Rest your mouse on a link (on a phone, press and hold it) to see the real address. Our client area is
my.elyspace.com. Lookalikes such asmy-elyspace.com,elyspace.supportormy.elyspace.com.example.netaren't ours. Read the address fromhttps://up to the next/: for our client area, that part is exactlymy.elyspace.com. - The sender's address doesn't match the name. Look at the full address, not only the display name "ElySpace". A free mail address (for example Gmail) or an unrelated domain is a clear sign of a fake.
- It wants an unusual payment. Gift cards, a bank account you've never seen, or crypto to a wallet in the email text. Real invoices are paid on the invoice page in the client area, with the methods listed there (see Payment methods we accept).
- An attachment you didn't expect, especially a ZIP file, a document that asks you to "enable content", or an HTML file.
- It names services you don't have, for example a renewal for a domain you never registered with us.
You're not sure? Check it this way
- Don't click links or open attachments in the email, and don't reply.
- Open
my.elyspace.comyourself and log in. - Look for the email in Email History, and for the invoice or service it mentions.
- Still unsure? Open a ticket and paste the email text. We'll tell you whether it's from us.
Report a fake email
Tell us, so we can warn other customers. Open a support ticket (see Open a support ticket) with the sender's address, the subject and the link the email wanted you to open. The abuse department's contact details are on our contact page. Then delete the email or mark it as spam or phishing in your mail program.
Common problems
You already clicked the link and entered your password
Act now. Open my.elyspace.com yourself and change your password (see Change your client area password). Use the same new password nowhere else. Turn on two-factor authentication (see Turn on two-factor authentication (2FA)), then check Account > User Management and Contacts for anything you didn't add. Open a ticket and tell us what happened.
You entered card details on a fake page
Call your bank or card provider right away and have the card blocked. Then tell us in a ticket.
A real email from us landed in spam
Check that it's in Email History. If it is, mark it as "not spam" in your mail program and add the sender to your contacts, so the next one arrives in your inbox.
Related articles
- Security tips for your ElySpace account
- See the emails we have sent you
- Turn on two-factor authentication (2FA)
- Keep your website safe: a security checklist
Still stuck? Open a support ticket and we'll help.
