Knowledgebase

How to Identify and Report Phishing Emails (Firstserv)

Phishing emails are fraudulent messages designed to trick you into sharing sensitive information such as passwords, login credentials, or payment details. These emails may impersonate Firstserv, using similar branding and language to appear legitimate.

This guide explains how to identify phishing attempts, what to do if you receive one, and how to respond if you’ve already interacted with it.

How to Recognise a Phishing Email

Phishing emails can look convincing, but there are often warning signs:

1. Check the Sender’s Email Address

• Legitimate Firstserv emails will come from recognised Firstserv domains
• Be cautious of slight variations or misspellings (e.g. altered letters or added numbers)

2. Generic Greetings

• Genuine communications will usually address you by name
• Greetings like “Dear Customer” or “Dear User” can indicate a phishing attempt

3. Urgency or Threatening Language

• Be wary of messages that pressure you to act quickly, such as:
  • “Your account will be suspended immediately”
  • “Confirm your details urgently”
• These are designed to create panic and bypass caution

4. Suspicious Links

• Always hover over links before clicking
• Ensure the URL points to an official Firstserv domain
• If it leads somewhere unfamiliar, do not click

5. Poor Formatting or Grammar

• Look for spelling errors, unusual wording, or inconsistent formatting
• While not always present, these are common signs of phishing

6. Unexpected Attachments

• Be cautious of attachments you were not expecting
• Avoid opening files such as .exe, .zip, or macro-enabled documents

What to Do If You Receive a Suspicious Email

If you receive an email that appears to be from Firstserv but seems suspicious:

1. Do not click links, open attachments, or reply
2. Report the email to Firstserv support for investigation
3. Optionally, report it to relevant cybersecurity authorities in your region
4. Delete the email from your inbox

What to Do If You’ve Already Clicked or Shared Information

If you have interacted with a phishing email, take action immediately:

• Change your Firstserv account password straight away
• Update your cPanel or server passwords if applicable
• Enable Two-Factor Authentication (2FA) if not already in place
• If payment details were entered, contact your bank or card provider
• Run a full antivirus and malware scan on your device
• Contact Firstserv support so we can check your account for suspicious activity

If You Can’t Access Your Account

If you believe your account may have been compromised:

• Attempt a password reset via the Firstserv login page
• If you’re still unable to access your account, contact support for assistance with account recovery

Important Security Reminders

• Firstserv will never ask for your password or sensitive information via unsolicited email
• We will never direct you to third-party websites to provide account details
• Always verify requests directly through your Firstserv Client Area

Stay Vigilant

Phishing attempts are not limited to Firstserv-related emails. Always exercise caution with any unsolicited message requesting sensitive information or urging immediate action.

If something doesn’t feel right, pause and verify before taking any action.

If you are unsure about any email you’ve received, the Firstserv support team is always available to help confirm its authenticity.