Domain name "renewal scams": how to recognise them

Fake emails claiming that your domain name or email service is about to expire remain a persistent problem. They look professional, create a sense of urgency and try to push you into paying quickly. In reality, these messages are phishing attempts or plain scams.

In recent weeks, we received several questions from customers about domain name invoices that supposedly came from other parties. We also received multiple emails ourselves with the subject “Reminder for the renewal of your services”, which clearly fall into this type of scam.

Below, we explain how these scams work, how you can recognise them, and what this means if you registered your domain name via db8.nl.

What is a domain name “renew scam”?

A domain name renew scam is a fraudulent email that pretends to come from your hosting provider or registrar. The message is almost always the same: “Your domain name will expire within a few days. Renew now to avoid service interruption.”

The email usually contains:

• a threatening tone (“services have been suspended”),
• a short deadline (for example 24 or 72 hours),
• a button or link to “renew now”,
• a request to pay (often by credit card).

If you click the link, you are redirected to a fake website where your payment details are stolen.

How can you recognise a domain name renew scam?

1. The sender is not legitimate

One of the clearest warning signs is the sender address. Scam emails often use:

• a strange domain name that has nothing to do with your provider,
• a foreign .it, .fr or .xyz domain,
• a “From” name that resembles a well-known company, but uses odd characters or mixed alphabets.

A professional registrar does not send invoices from random external domains.

2. The link points to a suspicious url

Always check the actual link (by hovering your mouse over it):

• the domain in the link is not that of your provider,
• it contains an ip address or a long numeric subdomain,
• the domain looks random or has nothing to do with hosting.

Renewing your domain name is always done via the official website or customer portal of your own provider — never through an unknown link.

3. Unnecessary panic and time pressure

Scammers rely on stress, using phrases such as:

• “permanently deleted within 3 days”,
• “services have already been suspended”,
• “final reminder”.

Legitimate providers communicate clearly, well in advance and without threatening language.

4. Language and details give it away

Watch out for:

• poor English or strange translations,
• a generic greeting (“Dear customer”),
• technical details that do not make sense,
• incorrect combinations of domain names and email addresses.

Even if the logo looks real, the content often reveals that something is wrong.

5. Payment outside your normal environment

A very important point: you are asked to pay via an external page, without logging in to your own account.

Legitimate invoices:

• are available in your customer portal,
• come from a known sender,
• do not redirect you to third-party payment pages.

Specifically for customers of db8.nl

This is crucial to remember: if you registered your domain name via db8.nl, you will never receive invoices from external parties.

This means:

• no emails from foreign “registrars”,
• no payment requests on behalf of other companies,
• no renewal links outside of db8.nl.

All communication about domain renewals, hosting, email services and invoices is handled exclusively by db8.nl and through the known contact channels. If you receive such an email anyway, it is by definition not legitimate.

What should you do if you are unsure?

1. Do not click anything.
2. Check your customer portal or your own administration.
3. Compare the sender domain with that of your real provider.
4. Contact us if you are in doubt.
5. Delete the email or mark it as phishing.

Have you already clicked or entered details by mistake? Take action immediately: change your passwords and inform your bank or credit card provider.

Why do these scams keep working?

Because they exploit fear of going offline, lack of technical knowledge, time pressure and trust in well-known brand names. That is exactly why awareness is so important.

Domain name renew scams are sophisticated, but easy to expose if you stay alert. Always check the sender, the link and the tone of the message. And remember this above all: if you registered via db8.nl, invoices and renewals never come from external parties. When in doubt, do not pay. Check first. Contact us first.