Hosting customers are a standard target for phishing, because an attacker who gets your control panel password gets your website, your email and your domains in one go. Messages claiming to be from your hosting company are among the most common attempts.
What we will never do
- We will never email you asking for your password. Not for verification, not for an upgrade, not for a migration, not ever.
- We will never ask you to confirm card details by email or by following a link in an email.
- We will never threaten to delete your account or domain within hours unless you click something immediately.
The signs
- Urgency. Phishing works by making you act before you think. Genuine hosting problems do not require action in the next twenty minutes.
- A link that does not go where it claims. Hover over it and read the actual address. Ours will always be on havenswift-hosting.co.uk. Look at the end of the domain, not the start: havenswift-hosting.co.uk.example.net is not us.
- A generic greeting where we would use your name.
- An attachment you were not expecting, particularly a zip, a document that wants macros enabled, or an HTML file.
What to do instead
Never act on the email. Open a browser, type our address yourself, log in, and see whether there is genuinely anything waiting for you. If there is a real problem with your account, it will be visible there or in a support ticket.
If you receive something suspicious, forward it to us and we will confirm. If you have already entered your password somewhere, change it immediately and then tell us.
