How to check if an email really came from us

Scammers know that "your website is about to go offline" or "your domain is expiring" gets people's attention. That's why hosting and domain companies are so often impersonated.

So let's make it easy to tell the real thing from a fake. We'd much rather you check ten genuine emails than get caught by one fake.

The golden rule

If you're not sure, don't click. Contact us directly.

Use a phone number or web address you already know is ours, not one from the email. We'll gladly confirm whether we sent it. Call us on +64 3 541 9468 or email support@slightlydifferent.co.nz.

What we will never ask for

We will never ask you, by email, phone or text, for:

• Your password
• Your full credit card number
• Your two-factor authentication codes (the one-time codes sent to your phone or shown in an app)

If anyone asks you for these while claiming to be us, it isn't us.

Red flags from anyone

These are warning signs whoever the email claims to be from, including us:

• A request to install software or give someone remote access to your computer when you didn't ask for help
• A request to pay by gift cards, cryptocurrency or a transfer to a personal bank account
• A threat to delete your website or cancel your service within hours unless you act immediately
• An unexpected email with a link to log in and a demand for urgent action
• A phone call out of the blue claiming your computer, website or email has been hacked

What you can expect from us

• Our emails and invoices come from @slightlydifferent.co.nz addresses.
• Your invoices, domains and support tickets are all in our client area at my.slightlydifferent.co.nz, so you can log in directly and check anything we send you.
• You can reach real people here in New Zealand by phone on +64 3 541 9468, by email or by support ticket.
• We're always happy for you to double-check anything with us. Nobody here will be offended.

8 ways to check an email

1. Look at the sender's address, not just the name

Anyone can set the "From" name to say anything. Click or tap on the name to see the real address behind it. Genuine emails from us come from @slightlydifferent.co.nz addresses. Watch out for lookalikes: slight misspellings (like "slightlydifferrent"), extra words (like "slightlydifferent-support.com") or different endings (.com instead of .co.nz).

2. Hover over links before clicking

On a computer, hover your mouse over a link and the real destination appears, usually at the bottom of the window. On a phone, press and hold the link to preview it. If the address isn't one of ours, don't click. Our article on what an SSL certificate is explains how to read a web address, and why a padlock alone doesn't prove a site is genuine.

3. Check the greeting

"Dear customer" or "Dear user" from a company that knows your name is a warning sign. It's not a guarantee either way, as some scams use your real name, but it's a clue.

4. Look for pressure and panic

"Act within 24 hours or your site will be deleted." Real companies don't operate that way. Urgency is one of a scammer's favourite tools, because people who are rushing don't stop to check.

5. Check the invoice details

Do the invoice number, amount and services match your account? Log in to the client area directly, by typing my.slightlydifferent.co.nz into your browser rather than using a link in the email, and see if the invoice is there.

6. Be careful with attachments

Be wary of any attachment you weren't expecting, especially .zip or .exe files, or documents that ask you to "enable macros" or "enable content". A genuine invoice never needs you to do that. If in doubt, view the invoice in the client area instead.

7. Check the spelling, grammar and branding

Fake emails are getting better, partly thanks to AI, so don't rely on spotting typos. But odd logos, off-brand design or unusual phrasing are still red flags.

8. Check the technical details (for the curious)

Most email programs let you view the full headers ("Show original" in Gmail, "View message source" or similar in others). Look for SPF, DKIM and DMARC results showing "pass". A "fail" on these is a strong sign the email didn't come from where it claims. Our domain, slightlydifferent.co.nz, is protected with all three.

Common scams that impersonate hosting companies

• Fake domain renewal notices. Official-looking invoices from companies you've never dealt with, asking you to pay to "renew" your domain. Some try to trick you into transferring it away. Check your domain details with your actual registrar, or in our client area if your domain is with us.
• "Your website has been hacked" or "Your site has errors". Often from someone trying to sell you "services". If you're worried, ask us and we'll take a look.
• "Your hosting account is suspended". The email links to a fake login page designed to steal your password.
• "Verify your email account". A message claiming your mailbox is full or about to be closed, with a link to a fake webmail login.
• Fake support calls. Someone phones claiming to be from your host or "Microsoft" and asks to access your computer.
• SEO or Google listing offers. "We noticed your site isn't ranking" emails are usually cold sales pitches, and sometimes outright scams.

What to do if you're suspicious

1. Don't click, reply or open attachments.
2. Forward it to support@slightlydifferent.co.nz and we'll tell you whether it's genuine. If you can, forward it as an attachment so the technical details are kept.
3. Report it. Our guide on where to report scams in NZ lists who to contact.
4. Delete it once you've reported it.

What to do if you've already clicked

Don't panic, and don't feel silly. It happens to the best of us. Do this now:

1. If you entered a password, change it straight away, along with anywhere else you've used the same one.
2. Turn on two-factor authentication for your accounts wherever it's offered.
3. If you entered payment details, call your bank straight away.
4. Run a security scan on your computer.
5. Contact us if it involved your hosting, email or domain, so we can check for any unauthorised access.

Act quickly, but don't beat yourself up. These emails are built to fool people.

Protect your account

• Use a strong, unique password for your client area and email, and don't reuse it anywhere else.
• Turn on two-factor authentication wherever it's available.
• Always log in by typing our address into your browser or using a bookmark, never via a link in an email.

Not sure about an email? Forward it to support@slightlydifferent.co.nz, give us a call on +64 3 541 9468, or get in touch. Checking never costs you anything, and we'd much rather you ask.