heads up on phishing

• 

  juliawilde · Member · Mar 11, 2014 at 12:30 pm

  • Copy link
  • Add topic to favorites

  Hi all,
  Since support is closed, I think my only option is to post here, though I don’t actually need support.

  There is a (fairly blatant, but probably capable of fooling people) WordPress ‘Verify Your E-mail Address’ e-mail floating around. I assume it’s a phishing attempt, though who knows.

  Just want the WordPress peeps and all of us who have accounts to be aware.

  Thanks,
  Jules

• 

  rsdowens · Member · Mar 16, 2014 at 6:34 am

  • Copy link

  This is problematic to me because I got this same message minutes after purchasing my domain from WordPress. I’m not sure where met email address was secured from. Is there a data breach? I ask because I now have to wonder how secure my credit card information is given how quickly my email went into the hands of these perps who are sending this. And we all saw how badly Target managed that during the sales period before Xmas.

• 

  shawnajroberts · Member · Mar 20, 2014 at 11:09 pm

  • Copy link

  Hi there!

  Thanks for checking with us first! This is a new requirement for buying a domain name, and because it is a recent implementation (a required by ICANN) we’re working on making it look less spammy.

  Please DO RESPOND TO THIS EMAIL.

  This email is about verifying the domain registration. All you have to do is click on the “Verify your email address” button. If you already did that, then you are good to go!

  I’m sorry for the confusion and please let me know if you have any other questions.

• 

  raincoaster · Member · Mar 20, 2014 at 11:51 pm

  • Copy link

  The email needs to be reconfigured. It is the source of countless “phishing attempts” threads in the forum. These can ALL be prevented by rewriting the email and changing the ‘from.’

• 

  juliawilde · Member · Mar 21, 2014 at 11:34 am

  • Copy link

  Just to be clear – I haven’t bought a domain name on WordPress in quite some time. Anything I once did is expired and my others are registered elsewhere. So, I can’t imagine why I would get a legit e-mail asking for me to verify my e-mail address. Unless you guys are just going down the line and asking anyone who’s ever had a domain name registered with WordPress? If that’s the case, I agree, it could definitely look less Spammy, come from a different address, and have a little more info. Thanks Shawna!

• 

  shawnajroberts · Member · Mar 21, 2014 at 5:16 pm

  • Copy link

  Thanks so much for your feedback!

  I definitely understand. We did add some documentation about this to our support site:

  Register a New Domain

  And we are actively working on getting these new emails to look more like what you expect from WordPress.com and we hope to have a solution for this up and running soon.

  @juliawilde – It looks like you do have a domain registered through us. This is a new requirement for all domains, not just newly registered ones, so you do need to respond to this email. Let me know if you need me to resend the verification email.