Reports of Spam / Phishing Emails

  • 2
  • 5
  • Question
  • Updated 6 days ago
  • Answered
  • (Edited)
We have received reports of suspicious, possibly malicious spam/phishing emails.  Please look at the samples below and inspect the emails and links for non-ringcentral domains.   These emails are not being sent from RingCentral and our Fraud team is aware of this issue. 

If you receive such emails, do not click on any links or download any possible attachments.  Please immediately delete the email.

Keep in mind that a text message notification from RingCentral will never contain any attachments.  Voice mail attachments from RingCentral will only be .mp3 files and fax attachments will only be PDF files. We also don’t send multiple attachments in a single notification email.

If you are still unsure if an email is malicious you can open a case. Please include a copy of the email and if possible include a copy of the email header. If you are not familial with how to view the email header visit this page, as the process varies a little bit depending on your email client. http://whatismyipaddress.com/find-headers


If you are not a RingCentral customer, but wish to report a suspicous email, you can either forward the original email as an attachment to community.support@ringcentral.com or copy & paste the email header and send us the email header. 

Please take a moment to read the full article on the RingCentral Blog.  Tips for Avoiding Phishing Scams
Photo of HootSuite App

HootSuite App

  • 4,150 Points 4k badge 2x thumb

Posted 1 year ago

  • 2
  • 5
Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Hello,

This email is not from RingCentral. As you can see the domain is from mindspring (email address may vary, likely spoofed)  and is probably being used as a phishing technique. Please do not click on the link and delete this message.

(Edited)
Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Hi Folks, below is another example of an email that is NOT from RingCentral and should be deleted immediately.
This reply was created from a merged topic originally titled Spam from ringcentral?.

Is this email that I received from ringcentral real:

You Have 1 unread Fax message
From: 302-216-2530
Incoming date: January 24, 2017
Page(s): 4

Your fax can be viewed online:
https://service.ringcentral.com/fax/v...
Photo of Chris Isble

Chris Isble

  • 162 Points 100 badge 2x thumb
This reply was created from a merged topic originally titled How can I report a suspicious or phishing email ?.

Recently, I have been receiving e-mail notifications using a Ring Central reply address, but they are clearly some type of phishing or virus.  The notice will say that I have a voicemail message, but the attachment is a .doc file. A valid message has an audio file attached, and I also get notified on my RingCentral app.

The other claims to be a text message, but again, a .doc file is attached.  Valid text message notifications put the body of the text message directly in the e-mail.

The formatting attempts to look professional, but does not match the RingCentral format I see on valid notifications.

I have been deleting them, but they are arriving with more frequency.

I don't know if there is even a way for RingCentral to do anything about this, but I thought I should let you know.

How does the spammer know that I am a RingCentral customer, or is it just a coincidence?

Photo of Mike

Mike, Official Rep

  • 91,038 Points 50k badge 2x thumb
Another example from the past which you may see.

Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Here is another example of an email that is NOT from RingCentral and should be deleted immediately:
Photo of Paul Zehr

Paul Zehr

  • 60 Points
It is good that you know that there are serious problems with your database security. It is no light thing when so many people's addresses are being leaked. I hope something is being done about this. We aren't paying $13 a month to get spam at all our company addresses. Attached is a screenshot of one we received. Hope it helps you. Another address received an email like the one above, but we didn't save it.
Photo of Jan Ferguson, Channel Partner

Jan Ferguson, Channel Partner, Champion

  • 29,612 Points 20k badge 2x thumb
Paul,

It is not about database security in all or even most cases. I get approximately 5 spam/phishing emails each month asking me to log into accounts where I don't have an account and have never had an account! The one I think is particularly humorous, even though I have to deal with deleting it, is the several I get each month from spammers  pretending to be AT&T U-Verse. I've never had AT&T U-Verse and it's not even offered in our area. I'm NOT in their database and never have been in ANY AT&T database.

Spammers send out thousands of emails, faxes and other communications every day and hope to get even 1/10 of 1% return. Most use robo-dialers which try numbers starting with 0001 in any given area code for any given area code.
Photo of Mike

Mike, Official Rep

  • 91,038 Points 50k badge 2x thumb
Paul, 

If you have some evidence that your account was somehow compromised then please do open a support case and provide any information you have so it can be investigated. 

Everyone once in a while we get reports of this and they are generally 3rd parties that are simply spoofing RingCentral's email address.  We've had no reports of any sort of security breach. 

Mike 
Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Hello Everyone,

Below are more examples of domains that are not from RingCentral and should be ignored/deleted 

ipphone-ringcentral.com

ringcentral-ipphone.com

ringcentral-voipsystem.com

ring-centralmail.co

voip-ringcentralinc.com
(Edited)
Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Hello Everyone,

Below is another example of a domain that is NOT from RingCentral and should be ignored/deleted immediately:

ringcentral@ringc.com


(Edited)
Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Hello Everyone,

Below is another example of a domain that is NOT from RingCentral and should be ignored/deleted immediately:


Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Hello Everyone,

Below is another example of a domain that is NOT from RingCentral and should be ignored/deleted immediately:

Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Hello Everyone,

Below is another example of a domain that is NOT from RingCentral and should be ignored/deleted immediately:


Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Hey Everyone,

Below is another example of a domain that is NOT from RingCentral and should be ignored/deleted immediately:


Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Hey Everyone,

Below is another example of a domain that is NOT from RingCentral and should be ignored/deleted immediately:


Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Hey Everyone,

Below is another example of a domain that is NOT from RingCentral and should be ignored/deleted immediately:


Photo of Saadet - Community Support

Saadet - Community Support, Official Rep

  • 39,044 Points 20k badge 2x thumb
Hey Everyone,

Below is another example of a domain that is NOT from RingCentral and should be ignored/deleted immediately: