There are affiliate links on this page.
Read our disclosure policy to learn more.

Domain name Renewal Scams

Domain Name Renewal Scams

Here's a really sleazy attempt to con people using the information available from the public domain name registrars.  If you own a website, and particular, a domain name, you will probably soon receive an email that looks like the one below.  We've substituted generic phrases in purple for the names you'll see, but other than that, this is what you will see.

Here's how their scam works:  The owner of a domain name receives an email like the one below, that looks almost exactly like a bill to register the domain name.  The subject of the email "This is your final notice of domain listing" clearly implies that your domain registration has expired and you are about to lose your domain name.

The email looks very much like a bill or invoice.  They claim to offer you renewals, at horrific prices; $69/year (the current price from www.godaddy.com, by comparison, is $9.99/year)

Example Scam:

Here is what the scam email looks like: (you can see another version from a Canadian address, here and a version from a New York address, calling itself "Domain Solutions Central")

In this case, the scammer's links take your to either: https://approved-email.info or to http://renewalnotes.info ( we removed the actualy links to them here).

 

From: is about to expire. [mailto:noreply@renewalnotes-mail.info]
Sent: Sunday, February 10, 2019 3:30 AM
To: jbatl123@bellsouth.net
Subject:

GoDaddy.com, LLC - Domain

--------------------

IMPORTANT NOTIFICATION

--------------------

Date: 2019-02-10

Dear JB Slemmer,

Your Domain SEO-listing shown below are set for renewal and need to be processed in the next 48 hours.

No worry, please click on this link and follow the instructions:

renewalnotes.info/

Find your product details below:

--------------------

Product Name:

SEO-Renewal for

Expire Time:

48 hours from 2019-02-10

Renewal cost per annum:

$69.00

--------------------

Amount due: $69.00

INFORMATION FOR PAYMENT

How to renew your domain can be found here:

renewalnotes.info/

This offer is only valid for 48 hours as a courtesy to let you know that your domain is expiring soon and this search engine optimization offer will expire.

Should your domain name expire, there is going to be a signifcant drop

in search engine services for your website, email and any other associated services.

This domain seo registration for limited time offer will end in 48 hours from 2019-02-10.

Thank you!

Sincerely,

Renewal department

--------------------

Note:

You received this message because you elected to receive notification offers. Should you want unsubscribe our Service and wish no longer wish to receive our offers, please click here. If you have multiple accounts with us, you must opt out for each one individually.

Who are these scammers?

We looked up these domains in ICANN's lookup tool: https://whois.icann.org/en/lookup?name=approved-email.info And found they are based in Germany:  You can complain to their domain regstar at the abuse reporting address below:

Domain Name: APPROVED-EMAIL.INFO
Registry Domain ID: D503300000552383597-LRMS
Registrar WHOIS Server: whois.udag.net
Registrar URL: https://www.united-domains.de/whois-suche
Updated Date: 2019-02-08T11:01:32Z
Creation Date: 2019-02-08T08:53:04Z
Registry Expiry Date: 2020-02-08T08:53:04Z
Registrar Registration Expiration Date:
Registrar: United-domains AG
Registrar IANA ID: 1408
Registrar Abuse Contact Email: abuse@united-domains.de 
Registrar Abuse Contact Phone: +49.8151368670

And this one:  Based in Panama:

 
Domain Name: RENEWALNOTES.INFO
Registry Domain ID: D503300000484560192-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2019-02-08T11:00:49Z
Creation Date: 2019-01-02T07:08:16Z
Registry Expiry Date: 2020-01-02T07:08:16Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068
Registrar Abuse Contact Email: abuse@namecheap.com 
Registrar Abuse Contact Phone: +1.6613102107
Reseller:
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Registrant Organization: WhoisGuard, Inc.
Registrant State/Province: Panama

Report the scammers:

In the US, report them to the abuse@ email address in their WHOIS record above

And for their violation of the CAN-SPAM act:

To file a FTC Fraud Reporting or to get free information on consumer issues, visit www.ftc.gov or call toll-free, 1-877-FTC-HELP (1-877-382-4357); TTY: 1-866-653-4261. The FTC enters Internet, telemarketing, identity theft, and other fraud-related complaints into Consumer Sentinel, a secure, online database available to hundreds of civil and criminal law enforcement agencies in the U.S. and abroad.

The FTC advises consumers to protect themselves by:

  1. Avoiding any domain name pre-registration service that guarantees particular top level domain names or preferential treatment in the assignment of new top level domain names.
  2. Avoiding doing business with people who send unsolicited faxes - regardless of the offer. Unsolicited faxes are illegal.
  3. Staying on top of the news about top level domain names at the ICANN website, www.icann.org.

We can add to that:

  1. Stick to well known, larger domain registrars (like Godaddy.com, 1and!.com, etc.).  They have the best rates (usually) anyway.
  2. Once you have registered your domain name, return to the same registrar for renewals and any changes.
  3. If you want to change domain registrars, do so through the process established, by starting at your current registrar.

In Canada, You can also report them here:

Advertising Standards Canada (ASC)
Address: 175 Bloor Street East, Suite 1801, Toronto, ON M4W 3R8
Telephone: +1 416 961 6311
Fax: (1 416) 961 7904
E-mail: linda.nagel@adstandards.com
Website: http://www.adstandards.com
Main Contact: Ms. Linda J. NAGEL
Other Languages Spoken: English

Other Scam names:

Other scam names in use are Siteleader.com - a visitor wrote CFR on 3/26/2007 to report that they are asking for money to renew the Domain Name Registration for his website. This may well be a scammer completely unrelated to the real company named Siteleader.com that does domain registrations.  That company is a small Wilmette, Ill.-based domain name and hosting company (Raul Herediais named as Site Leader Inc.'s vice president).  Siteleader.com is not without it's own controversies, since they charged for "pre-registration reservations" which is not the same thing as actually registering your domain name. Note that the FTC says that paid-for pre-registrations are a scam. See this consumer alert where the commission warns consumers against registrars that promise preferential treatment in the registration process in exchange for a fee, since the reservations won't necessarily ensure an actual registration. See this Wired.com article for more information. To see other discussion and complaints about Siteleader.com, see this page.

 UPDATE November 7, 2007: It appears as though Siteleader.com has gone out of business. Gee, what a surprise!

Other Domain Renewal and Registration Scams

"Domain Registry of America" (also called "Domain Registry of Canada")

This "company" is targeting domain name owners to transfer their domains by renewal. They are a reseller who use the following ICANN accredited registrars:

  • eNom Inc. (eNom.com)
  • Brandon Gray Internet Services, Inc. (NameJuice.com)

They obtain your contact information through the publicly accessible WHOIS database, and send renewal notices through regular postal mail in an envelope and on stationary that is intentionally designed to look like an official renewal notice.

Do not make any payments to "Domain Registry of Canada"/"Domain Registry of America" in order to renew your domain. Just renew your domain, when necessary, with the registrar you initially used! You can always transfer your domain to another company at any time, if you so choose!

If you have already made a payment to this company, we suggest contacting your bank or credit card company and ask for the payment to be stopped or reversed.

" Domain Registry of America" have already had a court injunction against them with regard to domain name reselling. For more information, please read these articles:
http://www.ftc.gov/opa/2003/12/domainreg.htm
http://www.whois.sc/news/2002-12/registry-america.html

"EU Registry Services" - Cambridge

"EU Registry Services" is sending out letters in the postal mail regarding domain names with upcoming renewals. The letters are entitled "DOMAIN EXPIRATION NOTICE" and are blatantly misleading, urgently requesting domain owners to "renew immediately to ensure service continues uninterrupted".

The letter has a tear-off slip at the bottom for you to detach and send with your check. Under no circumstances should you send any payment to these people. This is a blatant scam.

"EU Registry Services" has already received attention from the Advertising Standards Authority regarding a misleading claim over .eu domains:
http://www.asa.org.uk/adjudications/show_adjudication.asp?adjudication_id=37050&from_index=issues&issue_id=24

What should you do?

Should you receive ANY unsolicited email or postal notices from ANY company regarding your domain registration, please:

  • Cancel any payment you may have made.
  • Tear up the letter and dispose of it (or recycle!).
  • Renew your domain with your existing registrar.

And please let us know about any suspicious calls or emails you receive.  We look for patterns so that we can alert the authorities and victims to new scams, before it is too late!

 

 


 

For a comprehensive list of national and international agencies to report scams, see this page.