Domain Renewal Scams on Email
Fraudsters email businesses with urgent domain-renewal or listing notices designed to look official, tricking them into paying inflated fees to the wrong party.
Part of: Domain Renewal Scams
Last reviewed: 1 June 2026
Domain renewal scams use email to mimic the official notices businesses expect from their domain registrar. A message warning that a domain is about to expire taps into a real fear — losing the company website and email — and prompts a quick payment without close inspection.
Because renewal reminders are a normal part of running a domain, a fraudulent notice blends in. The scammer relies on the recipient not knowing exactly who their registrar is, or not checking, to redirect a legitimate-sounding payment to themselves or to a service the business never needed.
How this scam works on Email
The business receives an email styled as a renewal notice, often referencing its real domain name to appear authentic. The sender may pose as the registrar or as a third party offering renewal, search-listing, or directory services dressed up to look like a renewal.
The notice stresses an imminent expiry deadline and warns of website and email loss if action is not taken. It directs the recipient to pay through a link or to confirm details, sometimes at a price well above the genuine renewal cost, or for a service that is not actually required.
If the business pays, it either funds an unrelated party, signs up for an unnecessary service, or in some cases hands its domain control to a stranger. The genuine domain may still lapse, compounding the harm.
Common red flags
- A renewal notice from a sender that is not your actual registrar
- Urgent expiry warnings paired with threats of losing your site
- A renewal price noticeably higher than your normal fee
- A notice that is actually for a listing or directory service
- A payment link rather than a login to your known registrar account
- Pressure to pay immediately to avoid losing the domain
How to protect yourself
- Confirm your registrar's identity and log in directly to check renewal status
- Ignore payment links in notices and use your known registrar account
- Record your renewal dates so you can spot bogus expiry warnings
- Compare any quoted fee against your registrar's published pricing
- Treat unsolicited listing or directory offers as separate from renewal
- Enable auto-renewal and notifications with your genuine registrar
How to report it
- Report the email to your national consumer protection or fraud body
- Notify your bank or card issuer if a payment was made
- Forward the message to your genuine registrar's abuse address
Frequently asked questions
I got an email saying my domain expires soon. How do I know if it is genuine?
Do not click the link. Log in directly to the registrar you actually use and check the renewal date there. Confirm the sender matches your real registrar, and be suspicious of notices that are really for listing or directory services.