How to Spot Fake Uber and Rideshare Receipt Phishing Emails Targeting Australian Small Businesses

Summary

This guide helps you troubleshoot and resolve: How to Spot Fake Uber and Rideshare Receipt Phishing Emails Targeting Australian Small Businesses. Follow the steps below to fix the issue.

Common Causes

Phishing emails disguised as Uber or rideshare receipts are increasingly targeting Australian small businesses. These messages attempt to trick employees into clicking malicious links or entering login credentials on fake websites. Recognising the warning signs can protect your organisation from financial loss and data theft.

Common Warning Signs

• Unexpected receipts for trips you or your staff did not take
• Sender email addresses that do not match official Uber or rideshare domains
• Urgent language demanding immediate payment or account verification
• Generic greetings such as "Dear Customer" instead of your name
• Links that do not direct to the official website when hovered over
• Attachments claiming to be receipts or invoices
• Spelling and grammatical errors throughout the message

How to Verify a Suspicious Receipt

1. Do not click any links or download attachments in the email.
2. Open your web browser and navigate directly to the official Uber website by typing the address manually.
3. Sign in to your account using your usual credentials.
4. Check your trip history and receipts within your account dashboard.
5. If the trip or charge does not appear in your account history, the email is fraudulent.

What to Do If You Receive a Phishing Email

1. Do not reply to the email or engage with the sender.
2. Mark the message as junk or phishing in your email application.
3. Delete the email from your inbox and deleted items folder.
4. If you clicked a link or entered details, change your passwords immediately.
5. Contact your bank or payment provider if you provided financial information.
6. Report the email to your IT support provider or Open a Ticket for assistance.

Warning: Never enter your Uber login credentials or payment details on a page reached via an email link. Always log in by typing the website address directly into your browser.

Note: Enable multi-factor authentication on your Uber business account and all email accounts to add an extra layer of security against credential theft.

Protecting Your Business

• Train staff to recognise phishing attempts and report suspicious emails.
• Use email filtering and spam protection to reduce phishing delivery.
• Keep operating systems and security software up to date.
• Review business credit card statements regularly for unauthorised charges.

Still Having Issues?