Overview

Phishing is the most common way attackers gain access to accounts, servers and billing systems. This article helps you spot fraudulent messages, including ones pretending to come from ALYPOD Cloud.

Before you begin

• Be sceptical. Treat every unexpected message requesting a click, login or payment as suspicious until proven otherwise.

What to look for

1. The sender address. Display names can be spoofed. Check the full email address and the domain. ALYPOD will never ask for your password by email.
2. Urgency and threats. "Your account will be suspended in 24 hours" is a pressure tactic to stop you thinking.
3. Mismatched links. Hover over a link (without clicking) and check the destination. A link labelled account.alypod.com that actually points to alypod-secure-login.example is a red flag.
4. Unexpected attachments. Invoices, receipts or "scanned documents" you did not ask for may carry malware.
5. Generic greetings and poor writing. "Dear Customer" plus spelling mistakes is a common pattern.
6. Requests for credentials, card numbers, or one-time codes. Never send these by email, chat or phone.

Steps if you are unsure

1. Do not click links or open attachments.
2. Log in directly by typing https://account.alypod.com into your browser and check for any real notifications there.
3. Verify any billing matter through the ALYPOD Console rather than a link in an email.
4. Report suspicious messages to ALYPOD support so we can investigate and warn others.

If you already clicked

1. Change your ALYPOD account password and enable two-factor authentication in the ALYPOD Console.
2. Change any other account that used the same password.
3. If you entered card details, contact your bank immediately.
4. If a Pod credential was exposed, rotate the SSH key or password and review logins.

Troubleshooting

• Problem: You are not sure whether an ALYPOD email is genuine. Solution: Contact support via account.alypod.com and ask them to confirm before acting.

Related articles

• [Auditing logins and access]
• [Incident response: what to do if you are compromised]
• [Security best practices for your Pod]