question

hootsuite-app19 avatar image
hootsuite-app19 asked ·

Reports of Spam / Phishing Emails

We have received reports of suspicious, possibly malicious spam/phishing emails.  Please look at the samples below and inspect the emails and links for non-ringcentral domains.   These emails are not being sent from RingCentral and our Fraud team is aware of this issue. 

If you receive such emails, do not click on any links or download any possible attachments.   Please immediately delete the email.

Keep in mind that a text message notification from RingCentral will never contain any attachments.   Voice mail attachments from RingCentral will only be .mp3 files and  fax attachments will only be PDF files. We also dont send multiple attachments in a single notification email.

If you are still unsure if an email is malicious you can  open a case. Please include a copy of the email and if possible include a copy of the email header. If you are not familial with how to view the email header visit this page, as the process varies a little bit depending on your email client.  http://whatismyipaddress.com/find-headers


If you are not a RingCentral customer, but wish to report a suspicous email, you can either forward the original email as an attachment to community.support@ringcentral.com or copy & paste the email header and send us the email header. 

Please take a moment to read the full article on the RingCentral Blog.    Tips for Avoiding Phishing Scams
General Topic
1 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

saadetswift16514 avatar image
saadetswift16514 answered ·
Hello,

This email is  not from RingCentral. As you can see the domain is from mindspring (email address may vary, likely spoofed)  and is probably being used as a phishing technique. Please do not click on the link and delete this message.

1 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

saadetswift16514 avatar image
saadetswift16514 answered ·
Hi Folks, below is another example of an email that is NOT from RingCentral and should be deleted immediately.
1 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

MamaKeiki Hula Stacy Weigle avatar image
MamaKeiki Hula Stacy Weigle answered ·
This reply was created from a merged topic originally titled Spam from ringcentral?. Is this email that I received from ringcentral real:

You Have 1 unread Fax message
From: 302-216-2530
Incoming date: January 24, 2017
Page(s): 4

Your fax can be viewed online:
https://service.ringcentral.com/fax/v...
1 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

chris-isble avatar image
chris-isble answered ·
This reply was created from a merged topic originally titled How can I report a suspicious or phishing email ?.

Recently, I have been receiving e-mail notifications using a Ring Central reply address, but they are clearly some type of phishing or virus.  The notice will say that I have a voicemail message, but the attachment is a .doc file. A valid message has an audio file attached, and I also get notified on my RingCentral app.

The other claims to be a text message, but again, a .doc file is attached.  Valid text message notifications put the body of the text message directly in the e-mail.

The formatting attempts to look professional, but does not match the RingCentral format I see on valid notifications.

I have been deleting them, but they are arriving with more frequency.

I don't know if there is even a way for RingCentral to do anything about this, but I thought I should let you know.

How does the spammer know that I am a RingCentral customer, or is it just a coincidence?


1 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

mike avatar image
mike answered ·
Another example from the past which you may see.


1 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

saadetswift16514 avatar image
saadetswift16514 answered ·
Here is another example of an email that is NOT from RingCentral and should be deleted immediately:


1 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

paul-zehr7047 avatar image
paul-zehr7047 answered ·
It is good that you know that there are serious problems with your database security. It is no light thing when so many people's addresses are being leaked. I hope something is being done about this. We aren't paying $13 a month to get spam at all our company addresses. Attached is a screenshot of one we received. Hope it helps you. Another address received an email like the one above, but we didn't save it.
1 comment
1 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Paul,

It is not about database security in all or even most cases. I get approximately 5 spam/phishing emails each month asking me to log into accounts where I don't have an account and have never had an account! The one I think is particularly humorous, even though I have to deal with deleting it, is the several I get each month from spammers  pretending to be AT&T U-Verse. I've never had AT&T U-Verse and it's not even offered in our area. I'm NOT in their database and never have been in ANY AT&T database.

Spammers send out thousands of emails, faxes and other communications every day and hope to get even 1/10 of 1% return. Most use robo-dialers which try numbers starting with 0001 in any given area code for any given area code.

1 Like 1 ·
mike avatar image
mike answered ·
Paul, 

If you have some evidence that your account was somehow compromised then please do open a support case and provide any information you have so it can be investigated. 

Everyone once in a while we get reports of this and they are generally 3rd parties that are simply spoofing RingCentral's email address.  We've had no reports of any sort of security breach. 

Mike 
1 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

saadetswift16514 avatar image
saadetswift16514 answered ·
Hello Everyone,

Below are more examples of domains that are not from RingCentral and should be ignored/deleted 

ipphone-ringcentral.com

ringcentral-ipphone.com

ringcentral-voipsystem.com

ring-centralmail.co

voip-ringcentralinc.com
1 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

saadetswift16514 avatar image
saadetswift16514 answered ·
Hello Everyone,

Below is another example of a domain that is NOT from RingCentral and should be ignored/deleted immediately:

ringcentral@ringc.com


1 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Customer Spaces

Work together.
From anywhere.

Team messaging, video meetings
and phone - all in one app.


Get the new RingCentral app