How to tell a real Razorfrog email from a fake one, and what to do when you receive a suspicious message.
Active Phishing Campaign
Since May 2026, we have been aware of fraudulent emails impersonating Razorfrog and members of our team. These messages typically claim that your website requires an urgent security update or other service, then ask for payment by credit card.
Examples of fraudulent addresses we have seen include:
- maxelman.razorfrogwebdesigns@gmail.com
- razorfrog.com@gmail.com
- sales.razorfrog@gmail.com
These addresses are not associated with Razorfrog. Do not reply, click payment links, or provide credit card or banking information.
Razorfrog will only email you from an address ending in @razorfrog.com. If the part after the @ symbol is anything else, the message is not from us.
Check the real sender
Email display names and the portion of an address before the @ symbol can easily be faked. An address such as razorfrog.com@gmail.com may look convincing at a glance, but it is a Gmail address, not a Razorfrog address.
Look at what comes after the @ symbol. Our email addresses end in @razorfrog.com. If they end in @gmail.com, @outlook.com, or anything else, the message did not come from Razorfrog.
What Razorfrog will never do
- Ask you to pay through an unexpected outside payment form.
- Ask you to email us your password.
- Unexpectedly ask you for a two-factor authentication or login verification code.
- Suddenly change our payment instructions and pressure you to pay immediately.
- Threaten to take your website offline unless you immediately purchase an unexpected service.
Signs an email may be fraudulent
Unexpected security work
Your website suddenly needs a security update, malware removal, scan, certificate, repair, or other service you haven’t discussed with us.
Unexpected payment request
You’re asked to enter credit card or banking information into a form or website you haven’t previously used to pay Razorfrog.
Manufactured urgency
The message says your website will be suspended, compromised, blacklisted, or taken offline unless you act or pay immediately.
Wrong email address
The sender uses Gmail, Outlook, another free email service, or a domain that only looks similar to razorfrog.com.
Link goes somewhere unexpected
Hover over a link before clicking, or press and hold on a phone to preview it. Check the actual destination, not just the text displayed in the email.
Unfamiliar invoice or service
You receive an invoice, quote, or request for a service you don’t recognize or that we haven’t previously discussed with you.
How Razorfrog accepts payment
We will not unexpectedly ask you to pay through an outside credit card form, unfamiliar website, payment app, cryptocurrency, wire transfer, or another new payment method.
If our payment instructions ever appear to have changed, do not send payment until you have contacted us directly and confirmed the change.
Please only pay Razorfrog through the payment methods already established with us:
FreshBooks Invoices
Invoices and online payments are handled through our established FreshBooks account.
Mailed Checks
Checks may be mailed to our established Razorfrog business address.
Established ACH
Use ACH information that has already been established directly with Razorfrog.
Don’t let the email choose where you go.
When an email says something needs your attention, don’t use the links, phone numbers, or payment forms contained in a suspicious message.
Instead, open a new browser tab and visit razorfrog.com yourself, or start a new email using a Razorfrog email address you already know.
If something genuinely needs your attention, we’ll be happy to confirm it.
If you received a suspicious message
Do not reply to it. If the message is fraudulent, replying simply puts you in direct contact with the scammer.
Instead, contact Razorfrog using an email address or phone number you already have for us, or use the contact information on razorfrog.com.
You can also forward the suspicious message to us. We’re happy to confirm whether a message, invoice, or request actually came from Razorfrog.
If you already paid or entered information
If you entered a credit card: Contact your card issuer using the number printed on the card and tell them that your card information may have been compromised.
If you entered a password: Go directly to the legitimate service, change your password, and enable two-factor authentication if available. Change the password anywhere else you’ve reused it.
If you entered banking information: Contact your bank directly using contact information you know is legitimate.
Then contact Razorfrog and send us the suspicious message so we can help determine whether anything involving your website or related accounts needs attention.
Still not sure?
Ask us, but don’t reply to the suspicious email.
Contact Razorfrog separately and send the message along. We would much rather confirm that a legitimate message is real than find out about a fraudulent one after you’ve paid it.