Domain / Web-Hosting 'Expiring' Invoice Scam
A business gets a fake 'your domain/website is expiring' notice or invoice that either overcharges to renew or tricks you into transferring your domain to a scammer.
Think a message like this reached you? You can check it right now.
What this scam is
Businesses receive official-looking notices that their domain name or web hosting is about to expire, with a link or invoice to renew. The sender is not your actual registrar; paying either overcharges you for a bogus 'renewal/SEO' service, or 'renewing' actually authorizes transferring your domain away from you. Losing a domain can take your website and email offline. Always renew through your real, known registrar account.
What it usually looks like
- A 'domain/website expiring' notice from an unfamiliar company.
- An invoice or link to renew now.
- Upsells for 'SEO' or 'search listing' services.
- Requests that effectively transfer your domain.
Common warning signs
- Renewal notices from a registrar you don't use.
- Urgency about your site going offline.
- Prices higher than your real registrar's.
- Fine print authorizing a domain transfer.
Example wording scammers use
“FINAL NOTICE: Your domain expires in 3 days. Renew now to keep your website online: $228 (was $45).”
“Secure your search-engine listing and domain — pay this invoice to avoid suspension.”
These are illustrative examples written by ScamSplain, not real messages.
What the scammers want
- Overpayment for fake renewals/services.
- To hijack your domain via a transfer.
- Your business card details.
What to do
- Renew only through your actual registrar account (log in directly).
- Ignore notices from companies you don't have an account with.
- Never authorize domain transfers you didn't initiate.
- Verify your renewal dates in your real dashboard.
What to do if you already responded
- Contact your real registrar to check/lock the domain and reverse any transfer.
- Dispute the charge with your card issuer.
- Report at reportfraud.ftc.gov.