As a small business owner, you may have received a domain listing scam invoice, which looks like a legitimate registration statement for your domain name. However, it could very well be a scam, so it is crucial to investigate before you make any payments!
There are several companies that run similar website scams that have deceived many people, and most scam statements follow a particular format. In this article, we will discuss how to spot a domain listing scam, what to do if you receive one, and how to protect yourself from future scams.
What is a Domain Listing Scam?
A domain listing scam is a fraudulent statement that appears to be a domain name renewal notice. The scammer sends a document to domain owners, stating that they need to renew their domain name, which will expire soon. The message usually contains a logo, account number, and contact information of the domain owner, making it appear genuine.
A directory listing service is a legit service that you can buy separately from your domain name from a reputable company, but those are optional services that help get you listed in online directories. However, the companies that perpetrate these scams make the services appear to be a bill for domain name registration. Even if they are legit services… would you want to do business with someone who does something shady like that? (We offer a legit online directory aggregator submission service, so if that really is something you’re interested in, you can always compare to our service or ask us for more information… We won’t give you any scare tactics.)
If you receive one of these messages, it may not be from your domain registrar or hosting company. The sender could be a third-party company trying to trick you into paying for services you don’t need, very often by making it seem like your domain registration is due.
How do these scams work?
These scams work by sending fake invoices to small business owners who own a domain name. The invoice appears to be legitimate and looks like it is from a well-known company, but it is actually a scam. The goal is to trick the recipient into paying for a service that they don’t need or didn’t request.
Once the business owner pays the fake invoice, they will likely never hear from the scammer again. The service that was promised will never be delivered, and the business owner will have lost their money.
Why are these scams successful?
These scams are successful because they employ some very common (and compelling) social engineering techniques. When a scammer uses social engineering tactics, they prey upon someone’s fears and anxieties or even on someone’s greed or ignorance.
Some examples of these techniques are:
- “WARNING! Your domain will be expiring very soon! Take action before it’s too late!” (targeting fear and anxiety)
- “GET YOUR SITE ON PAGE 1 of Google for just $299!” (targeting greed or ignorance)
Scammers may also successfully target small business owners because they know that running a business can be overwhelming. Business owners may not have the time or resources to investigate every invoice they receive and simply just make a payment.
How to Spot a Domain Listing Scam?
Several telltale signs can help you identify a domain listing scam. Here are some of the key indicators to watch out for:
- Unsolicited notice: If you receive an email or letter from a company you’ve never heard of, claiming to provide domain listing services, it’s probably a scam.
- High fees: Domain listing scams often charge much higher fees than what you would typically pay for domain registration or renewal. (For example, most domain names renew somewhere in the range of $15 – $40 per year. )
- Misleading language: The scammers may use misleading language, such as “Domain Name Search Engine Registration” or “Domain SEO Service Registration,” to make their offer sound legitimate.
- Fear tactics: Some domain listing scams use fear tactics to convince domain owners to pay, such as threatening to shut down their website or make their domain name available to someone else.
- No clear terms: Scammers may provide little or no information about the services they offer or the terms of their agreement.
What to Do If You Receive a Domain Listing Scam?
If you receive a domain listing scam message, don’t panic. Here are the steps you should take:
Check with your domain registrar or hosting company
Before making any payments, check with your domain registrar or hosting company to see if they sent the notice. Most legitimate domain registrars will send renewal reminders via email, and you can renew your domain name online.
Do some research
If you’re not sure if the notice is a scam or not, do some research. Search for the company online and read reviews from other customers. Check if the company has a website, and if it does, check its About Us and Contact pages. (We would recommend that you also compare prices for legitimate services at other vendors and choose one of those over accepting an unsolicited offer from one that would use dubious techniques like social engineering.)
Report the scam:
If you believe you’ve received a domain listing scam message, report it to the Federal Trade Commission (FTC) and the Internet Crime Complaint Center (IC3). You can also report it to your state’s attorney general’s office.
Tips to help you protect yourself from domain listing scams
- Know your domain registrar: Keep track of your domain registrar and hosting company. Save their contact information and make sure you know what services they provide.
- Be wary of unsolicited messages: Be cautious of unsolicited messages claiming to offer domain listing or renewal services.
- Read carefully: Read any renewal or listing notices you receive carefully. Check if the notice is from your domain registrar or hosting company.
- Use secure payment methods: It’s important to use secure payment methods when paying for domain registration or renewal. Look for payment options that use SSL encryption and consider using a payment method that offers buyer protection, such as a credit card. Be cautious of payment requests that ask for wire transfers or other non-traceable payment methods, as these are very often used in scams.
- Enable two-factor authentication: Two-factor authentication (2FA) is an additional layer of security that can help protect your domain and hosting accounts. With 2FA, you will need to enter a code generated by a mobile app or sent via text message to a mobile device, in addition to your username and password. This adds an extra layer of protection against unauthorized access to your account, even if your login credentials are compromised.
By following these tips, you can better protect yourself from domain listing scams and ensure that your domain and hosting accounts remain secure.
Stay safe out there!
In conclusion, small business owners need to be aware of the various scams that target them, including domain listing scams. These scams can be quite convincing and can result in the loss of a significant amount of money.
By educating yourself about these scams, verifying the source of any invoices or solicitations you receive, and taking your time when reviewing them, you can protect yourself from falling victim to a domain listing scam. If you do receive a scam invoice or solicitation, report it to the appropriate authorities to help prevent others from falling victim to the same scam.
If Roost Web Strategies is your hosting provider, the reminder for billing will always come from our company. Whether by email or envelope, you’ll see our branding on the invoice. We want to help you stay safe, so if you ever aren’t sure something you receive about your website or website services is from the proper authorities, reach out to us and ask any questions you have. We’ve helped catch quite a few of these scams and we’re always on the lookout for new ones.
