< Back to list

How can I protect myself from phishing emails and websites?

Alibaba.com is committed to promoting and providing a safe and fair trading environment to all users. To prevent yourself from becoming a victim of a phishing website, please be aware that if you suspect the website you’re on is a fake Alibaba.com site, leave this website immediately and report it to Alibaba.com.

The following are case studies on typical phishing emails or websites:

Case No.


The Goal

Recent Scenarios

Related Examples


Person posing as an employee of Alibaba.com

To obtain personal information such as your member ID and Password

1. You're requested to upgrade your account or update account information for security reasons.

2. You're notified that a buyer has sent you a purchase order, and you should sign in to view more details.

3. You're requested to confirm your email ad

Learn More

Phishing emails ask you to click a link and direct you to a fake website (which often looks very similar to the real one) where you are asked to enter personal information such as your member ID and password. Phishing emails take a number of forms, including the following:

You may be asked to
1. Renew your membership
2. Sign in to resolve complaints
3. View details because your membership agreement has been changed
5. Complete your member profile for registration
6. Check unread security messages
7. View details as a buyer has sent you a transaction request
8. Sign into your account in order to keep it active
9. Confirm the authenticity of your email address

Learn More


Person posing as an employee of Alibaba.com

To obtain detailed personal or company information


Apart from stealing your personal data, phishing emails may request detailed information about your company. They may claim that:

1. Alibaba.com has moved their central database to a new location and your company information is needed for account verification.

2. You are the winner of a promotion for a free Gold Supplier membership and you need to provide your company information for verification.

3. You need to provide complete information for Authentication and Verification (A&V) check of your company in order to activate your Gold Supplier account.

Learn More


Person posing as an employee of Alibaba.com

To steal money by requesting payment through unsafe payment methods


These emails attempt to scam you by asking you to make a payment transfer.
They may ask you to make payment to a designated person through a high-risk payment method such as Western Union.

Learn More


Person posing as an employee of Alibaba.com

To steal money by selling discounted Alibaba.com memberships


These emails claim that you can upgrade to become a Gold Supplier for only a fraction of the current price.
The links and buttons (e.g. Upgrade Now) contained in these emails will then direct you to a scam website where you are asked to make payment.

Learn more


Person posing as a buyer

To obtain personal information such as your member ID and password

A fake buyer may send a normal inquiry email to build trust with you, and follow up with a second or third email containing a phishing link that you will then be more likely to open.

Learn more

The fake buyer may claim in their email that:

1. They heard in a forum that you received complaints from other buyers or your products are not reliable and provide the forum link in the email

2. They are interested in your products, and provide a link in the email to let you learn more details about their potential order.

3. They may also ask you to provide your personal information in order to prove you're a trustworthy supplier.

Learn more

Is this information useful?

Thank you for your feedback!