How to Spot Fake Domain Expiration and Renewal Emails Targeting Australian Small Businesses

Summary

This guide helps you troubleshoot and resolve: How to Spot Fake Domain Expiration and Renewal Emails Targeting Australian Small Businesses. Follow the steps below to fix the issue.

Common Causes

Scammers frequently target Australian small business owners with fake domain expiration notices. These emails often look official and create a sense of urgency, warning that your website will go offline unless you pay an immediate renewal fee. Paying these invoices does not renew your domain; it simply sends money to fraudsters. This guide explains how to identify these scams and protect your business.

Identifying Fake Domain Renewal Emails

Common Red Flags

• The email comes from a registrar you have never used.
• The sender address uses a public domain (e.g., @gmail.com or @outlook.com) instead of a company domain.
• The message demands payment via wire transfer, cryptocurrency, or unfamiliar payment links.
• The email uses urgent language, such as "final notice" or "immediate suspension," to pressure you into acting quickly.
• The invoice amount is significantly higher than standard domain registration fees.

How to Verify Your Domain Registrar

1. Open your web browser and navigate to a WHOIS lookup tool, such as whois.icann.org.
2. Enter your business domain name in the search field.
3. Review the "Registrar" section of the results to see which company manages your domain.
4. Compare this name with the sender of the email you received. If they do not match, the email is likely a scam.
5. Check the "Registry Expiry Date" to confirm when your domain actually expires.

Tip

If you are unsure about a domain renewal notice, contact your legitimate registrar directly through their official website or support portal. Do not use contact details provided in the suspicious email.

What to Do If You Receive a Suspicious Email

1. Do not click any links or download attachments within the suspicious email.
2. Do not reply to the sender or provide any payment details.
3. Mark the email as junk or phishing within your email client.
4. Delete the email from your inbox and the deleted items folder.
5. If you have already provided payment details, contact your financial institution immediately to report potential fraud.

Protecting Your Domain From Fraud

Enable Domain Privacy

Use domain privacy protection to hide your personal contact details from public WHOIS records. This reduces the amount of targeted spam and scam emails you receive.

Use Auto-Renewal

Enable auto-renewal through your legitimate registrar to ensure your domain does not expire unexpectedly. This removes the urgency that scammers rely on to trick you.

Caution

Never pay an invoice for a domain renewal unless you have independently verified the registrar and the invoice details through your own account portal.

If you are unsure whether a domain notice is legitimate, avoid interacting with the email and contact your domain registrar's support team for assistance.

Still Having Issues?