Fake email from "WordPress"? Is this from spammers or something real?

  • Unknown's avatar

    This is about a WordPress site I help to manage called Topstone.

    The admin recently got an email from “(email visible only to moderators and staff)” with the subject “[Topstone] New User Registration.”

    The body read:
    “New user registration on your site Topstone:

    [username redacted]

    Email: (email visible only to moderators and staff)”

    This seems like a pretty standard new user notification from WordPress.com, however, the email address makes me question whether it is authentic.

    I am also concerned because there is nowhere on the site (that we are aware of) that would enable visitors to create new accounts themselves. Is the site compromised or is this simply a spamming email?

    Thank you for any help.

  • Unknown's avatar

    Also, this user does not appear in the Users tab of the website dashboard.

  • Good Morning –

    Please share the site URL. We are only able to support sites hosted here at WordPress.com.

  • Unknown's avatar

    The URL is topstoneprojects.com. The domain is hosted thru GoDaddy but the site was built with WordPress Create theme and WordPress dashboard.

    I just need to know whether the email sender from “wordpress-sandbox” is legitimate or not.

  • topstoneprojects.com is a self hosted WordPress site.

    WordPress.com (here) is a bit different than the self hosted WordPress version. This guide outlines some of those differences: https://en.support.wordpress.com/com-vs-org/

    I believe that this is a user registration email you’ve received. It looks like you have turned off registration now.

    The best place for help with a self hosted WordPress sites is at https://wordpress.org/support/

  • The topic ‘Fake email from "WordPress"? Is this from spammers or something real?’ is closed to new replies.