How to recognize an official Oogle message (and spot phishing)

A real Oogle email comes from an address ending in @my.oogle.net (emails from the client portal) or @oogle.net (our team), and its links go to my.oogle.net or oogle.net. We never ask for your password. If you're not sure about a message, don't click anything in it: sign in to the portal yourself and check.

Who our emails come from

Look at the full address, not only the name. Anyone can set a display name to "Oogle Billing"; the part after the @ is harder to fake. On a phone, tap the sender's name to see the full address.

Check a message in four steps

1. Check the sender's address. It should end exactly in @my.oogle.net or @oogle.net. Watch for look-alikes such as extra words, hyphens or different endings (for example oogle-billing.com or my-oogle.net).
2. Check where the links go before you click. On a computer, hover over a link to see its address. On a phone, press and hold. Real links start with https://my.oogle.net/ or https://oogle.net/.
3. Check what it asks for. We never ask for your password, a one-time code, or your card or bank details by email.
4. Check the portal. Sign in by typing my.oogle.net into your browser yourself. Any real invoice is under Billing, real ticket replies are under Support, and copies of the emails the portal has sent you are under Email History.

If the message passes all four, it's from us.

Common signs of phishing

• Pressure to act fast: "pay within 24 hours or your website will be deleted".
• A request to reply with a password, code, or payment details.
• A link to a sign-in page that isn't my.oogle.net.
• Payment instructions that differ from the portal, such as a new bank account or a gift card.
• An unexpected attachment, especially a zip file or a document that asks you to "enable content".
• Small spelling errors in the company name or sender address.
• A message about a service you don't have with us, such as domain registration. Oogle doesn't register domains for clients today.

A message can pass a quick look and still be fake. When in doubt, check in the portal.

You'll know it's genuine when

The sender address ends in @my.oogle.net or @oogle.net, every link points to my.oogle.net or oogle.net, and what the email describes (an invoice, a ticket reply, a quote) is also there when you sign in to the portal yourself.

If you've received a suspicious message

1. Don't click links, open attachments, or reply.
2. Sign in to the portal yourself to see whether there's anything real waiting for you.
3. Open a Billing & Account ticket to tell us about it. Describe the sender address and subject line. Don't forward attachments.
4. Delete the message, or mark it as phishing or junk in your email program.

If you've already clicked or replied

• You typed in a password: change it now, and anywhere else you use the same one. Turn on two-factor authentication.
• You entered card or bank details: contact your bank straight away.
• You opened an attachment: run your computer's security software and tell us in a ticket.

Next steps

• Keep your Oogle account secure
• Find emails we've sent you