Introduction
If you run a website, you will get emails that sound really alarming.
- They look urgent.
- They sound technical.
- And they try to make you act quickly.
Many of my clients forward these to me asking “Is this real?”
Most of the time, they are not.
Real Example 1
“Your website is not compliant” (WordPress scam)
This is a real email a client received:
“Your website is not fully aligned with the latest WordPress platform requirements… your domain and plugins need to be renewed before April 1… failure may lead to downtime.”
What makes this a scam
- WordPress does not email you like this
- “Compliance” is vague and meaningless here
- Plugins do not need “renewing” in bulk like this
- It creates urgency with a deadline
- It asks you to reply rather than log in safely
This type of message is designed to panic you into replying or paying for something you do not need.
👉 Read More: How to safely backup & update your WP website
Real Example 2
Fake Shopify support email
From: shopify.team.regulatory.official@gmail.com
Message:
“Your store’s Data Processing Agreement is not in compliance… this puts your store at risk… reply here and we can fix it today.”
What makes this a scam
- The sender is a Gmail address, not Shopify
- Real Shopify emails come from @shopify.com
- It uses legal sounding language to scare you
- It asks you to reply instead of directing you to your account
- No specific details about your store
This is a classic “authority + urgency” tactic.
👉 Read More: Tips for managing your own website
The 7 Simple Checks You Should Always Do
Before clicking anything, run through this:
1. Check the sender email properly
Do not just read the name.
Click into it.
If it is a free email account, it is almost always a scam.
2. Ask yourself: do they normally contact you like this?
- WordPress does not email you about compliance
- Hosting companies rarely ask you to reply to emails for fixes
- Domain providers usually send clear renewal notices, not threats
If it feels unusual, it probably is.
3. Look for pressure or urgency
Phrases like:
- “Immediate action required”
- “Before April 1”
- “Your site may go offline”
These are designed to rush you so you do not think.
4. Check for vague language
Scam emails often say:
- “Not compliant”
- “Platform requirements”
- “Security risk”
But they do not explain what is actually wrong.
5. Never click links directly from the email
Instead:
- Go to your website provider manually
- Log into your hosting or Shopify account
- Check notifications there
If it is real, it will be in your account.
6. Watch for requests to reply or “confirm details”
Legitimate companies will not ask you to:
- Send passwords
- Confirm sensitive details by email
- Reply to fix technical issues
7. Trust your instinct
If something feels off, slow down.
You are not going to break your website by waiting an hour to check.
What to Do If You Receive One
Keep it simple:
- Do not click anything
- Do not reply
- Do not download attachments
- Delete it
👉 If you'd rather not deal woith this kind of thing - you might want to checkout my Website Care Plan / Website Management Plans
What If You Already Clicked Something?
Do this straight away:
- Change your passwords (hosting, email, WordPress, Shopify)
- Run a malware scan if you downloaded anything
- Contact your web support
- Keep an eye on your website and emails
Acting quickly matters more than panicking.
A Quick Reassurance
These emails are very common.
They are designed to catch busy business owners off guard.
It does not mean your website is at risk. It just means you need to know what to ignore.
If You’re Ever Unsure
f an email about your website does not feel right, do not rush.
You do not need to guess.
Try this:
- Copy a sentence from the email
- Paste it into Google or ChatGPT
- See if others are reporting the same message
Scam emails are often sent to thousands of people, so they usually show up online quickly.
You can also:
- Paste the link into a checker like: https://easydmarc.com/tools/phishing-url
- This helps flag suspicious or known malicious links
If it is genuine, you will usually find clear information from the official company website.
If it is a scam, you will often see warnings from other users.
NOTE
Never click the link directly from the email to check it.
Always copy and paste it into a tool instead.