< Back to list

How can I protect myself from phishing emails and websites?

Alibaba.com is committed to promoting and providing a safe and fair trading environment to all users. To prevent yourself from becoming a victim of a phishing website, please be aware that if you suspect the website you’re on is a fake Alibaba.com site, leave this website immediately and report it to Alibaba.com.

 


The following are case studies on typical phishing emails or websites:

Case No.

      Sender

The Goal

Recent Scenarios

Related Examples

 1

Person posing as an employee of Alibaba.com

To obtain personal information such as your member ID and Password

 

1. You're requested to upgrade your account or update account information for security reasons.

 


2. You're notified that a buyer has sent you a purchase order, and you should sign in to view more details.


3. You're requested to confirm your email ad
dress.

Learn More

 

Phishing emails ask you to click a link and direct you to a fake website (which often looks very similar to the real one) where you are asked to enter personal information such as your member ID and password. Phishing emails take a number of forms, including the following:

You may be asked to
1. Renew your membership
2. Sign in to resolve complaints
3. View details because your membership agreement has been changed
5. Complete your member profile for registration
6. Check unread security messages
7. View details as a buyer has sent you a transaction request
8. Sign into your account in order to keep it active
9. Confirm the authenticity of your email address  

 

Learn More

2

Person posing as an employee of Alibaba.com

To obtain detailed personal or company information

/

 

Apart from stealing your personal data, phishing emails may request detailed information about your company. They may claim that:

 
1. Alibaba.com has moved their central database to a new location and your company information is needed for account verification.


2. You are the winner of a promotion for a free Gold Supplier membership and you need to provide your company information for verification.


3. You need to provide complete information for Authentication and Verification (A&V) check of your company in order to activate your Gold Supplier account.

Learn More

 3

Person posing as an employee of Alibaba.com

To steal money by requesting payment through unsafe payment methods

/

These emails attempt to scam you by asking you to make a payment transfer.
They may ask you to make payment to a designated person through a high-risk payment method such as Western Union.


Learn More

 4

Person posing as an employee of Alibaba.com

To steal money by selling discounted Alibaba.com memberships

/

These emails claim that you can upgrade to become a Gold Supplier for only a fraction of the current price. 
The links and buttons (e.g. Upgrade Now) contained in these emails will then direct you to a scam website where you are asked to make payment.


Learn more

 5

Person posing as a buyer

To obtain personal information such as your member ID and password

A fake buyer may send a normal inquiry email to build trust with youand follow up with a second or third email containing a phishing link that you will then be more likely to open.

Learn more

 

The fake buyer may claim in their email that: 


1. They heard in a forum that you received complaints from other buyers or your products are not reliable and provide the forum link in the email


2.  They are interested in your products, and provide a link in the email to let you learn more details about their potential order.


3. They may also ask you to provide your personal information in order to prove you're a trustworthy supplier.

Learn more

 

 

 

Is this information useful?

yes
no
Thank you for your feedback!