Fake Domain Hosting Renewal Scam via Email
Scammers email website and domain owners official-looking renewal notices for domains or hosting they don't actually manage, at inflated prices, hoping owners renew through the scammer instead of their real registrar.
Part of: Fake Domain Hosting Renewal Scam
Last reviewed: 5 July 2026
Renewal notices are a routine part of owning a domain, and the email from your actual registrar is genuine — which is why this scam works in the inbox. The fraudulent notice lists your real domain name and a near-accurate expiration date, both harvested from public registration records, and warns that failing to renew through the sender means losing the site, at a price several times normal rates. Paying renews nothing, because the sender controls nothing. The distinction that matters most: an accurate domain and date prove nothing, since both are public — only the company you registered with can renew it.
How this scam works on email
An email designed to look like an official renewal notice arrives, listing the recipient's actual domain name and a real or near-accurate expiration date, pulled from publicly available domain registration lookup data. It warns that failing to renew through the sender — who is not the domain's actual registrar — will result in losing the domain, and lists a renewal price several times higher than standard registrar rates.
Victims who pay do not renew their domain at all, since the sender has no actual control over it; the domain may lapse and be scooped up by another party, or the payment simply pays a bogus 'renewal service' with no relationship to the real registrar, and the actual renewal deadline is missed because the owner believed they had already handled it.
Common red flags
- Renewal notice from a company that isn't your domain's actual registrar or hosting provider
- Price significantly higher than your regular annual registrar or hosting rate
- Urgent warning that the domain will be lost imminently, timed near the real expiration date
- Payment requested by wire, check, or card directly to an unfamiliar company name
- Email doesn't match the login and billing history in your actual registrar account
- Generic 'Domain Owner' greeting rather than your actual account name
How to protect yourself
- Log into your actual domain registrar or hosting account directly to check the real renewal date and price, never through an emailed link
- Ignore renewal notices from any company other than your verified registrar or host
- Enable auto-renewal and WHOIS privacy through your real registrar to reduce exposure to these notices
- Verify the registrar name against your original purchase receipt or account dashboard
- Set your own calendar reminder for your actual renewal date rather than relying on unsolicited notices
- Report suspicious renewal notices to your real registrar's abuse or support team for confirmation
How to report it
- Report the email as phishing/spam through your email provider
- Forward the notice to your real registrar's abuse reporting address for verification and warning
- Report to the Federal Trade Commission at reportfraud.ftc.gov
Frequently asked questions
I already paid a fake renewal service — did I lose my domain?
Paying a fake renewal service does not actually renew your domain, so you still need to renew directly with your real registrar before the true expiration date to avoid losing it. Log in to your actual registrar account right away to confirm the real status and renew if needed.
Why does the scam email have my correct domain name and expiration date?
Domain registration details, including expiration dates, are often publicly viewable through WHOIS lookup tools, so scammers can pull accurate information without any special access to your account. An accurate-looking notice is not proof the sender is legitimate.
Can I get a refund from a fake domain renewal company?
Try requesting one in writing, but treat the odds as low since these operations often use hard-to-trace payment processors. If you paid by card, dispute the charge with your issuer as a service not rendered, since no real renewal occurred.
How do I know who my real domain registrar is?
Check your original purchase confirmation email or perform a WHOIS lookup on your domain, which lists the current registrar of record — compare this against any renewal notice sender.