Suspected Phishing

Estimated 3 minute read

|

Updated May 19, 2026, 12:00 AM EST

What is phishing?

Phishing is a type of cyber attack where attackers impersonate legitimate organizations or individuals through email, text messages, phone calls, or websites to trick you into divulging sensitive information, such as login credentials, credit card numbers, or other personal data. The messages often look authentic and may urge you to take immediate action, such as clicking a link or downloading an attachment.

How to recognize phishing or smishing

  • Phishing: Suspicious emails pretending to be from trusted sources, often containing:
  • Unusual or generic greetings (e.g., “Dear customer”)
  • Spelling and grammatical errors
  • Requests for sensitive information
  • Suspicious links or attachments
  • Mismatched sender email addresses (e.g., klaviyo-support@gmail.com instead of official @klaviyo.com)
  • Smishing: The same attack, but via SMS/text message. Signs include:
  • Texts from unfamiliar numbers asking for personal info
  • Links to login pages or requests to reset passwords
  • Pressure to act quickly (“Your account will be locked”)

Hover over links without clicking to preview their destinations. If a suspicious email or text asks you to sign in to Klaviyo, type www.klaviyo.com into your browser instead of using the message’s links. Emails sent by other businesses using Klaviyo can link to those businesses’ websites or use tracking links, so a link’s domain alone does not prove that a message is safe.

What to do if an email impersonates Klaviyo

An email impersonating Klaviyo pretends to come from Klaviyo or one of our employees. It might ask you to give information about your account or take action.

  1. Do not click links, download attachments, reply, or provide any requested information.
  2. Verify the content: Go directly to the official Klaviyo website by typing www.klaviyo.com in your browser, not by using links in the suspicious email.
  3. Forward the suspicious email to abuse@klaviyo.com for investigation, and notify your IT/security team if you have one.
  4. Make sure to include email headers and/or the email source code.
  5. Delete the suspicious email after reporting.

What to do if a suspicious email was sent using Klaviyo

This is an email sent using Klaviyo that you suspect is a scam or contains other malicious content.

  1. Do not click links, download attachments, reply, or provide any requested information.
  2. Check the sender’s email address against the business it claims to represent. Businesses sending email using Klaviyo use their own sender addresses, which do not need to end in @klaviyo.com. A familiar sender address alone does not prove that a message is safe.
  3. Contact Klaviyo support: Reach out via the official Klaviyo support link to verify the legitimacy of the message.
  4. Forward the email to abuse@klaviyo.com, stating your suspicion.
  5. Make sure to include email headers and/or the email source code.
  6. Delete the message once reported to avoid accidentally clicking it later.

If you already shared your login information

If you entered your Klaviyo password or shared a multi-factor authentication (MFA) code in response to a suspicious message, follow the steps in Suspected Account Compromise immediately to reset your password, review account access, and report the incident.

How to protect yourself from phishing

  • Always verify sender addresses before opening links or attachments.
  • Enable multi-factor authentication (MFA) on your Klaviyo account and the email account you use to access Klaviyo.
  • Never disclose credentials (a password or one-time code) or sensitive information via email or mobile messaging platforms.
  • Keep software and security patches up to date, and follow guidance from your IT department if you have one.
  • Be wary of urgent requests or threats demanding quick action.
  • Educate yourself and your team on phishing tactics by staying informed about current scams.

Was this article helpful?

YesNo

Use this form only for article feedback. Learn how to contact support.

Explore more from Klaviyo

Community

Connect with peers, partners, and Klaviyo experts to find inspiration, share insights, and get answers to all of your questions.

Visit Community

Partners

Hire a Klaviyo-certified expert to help you with a specific task, or for ongoing marketing management.

Hire a partner

Support

Access support through your account.

Email support (free trial and paid accounts) Available 24/7

Chat/virtual assistance Availability varies by location and plan type

Log in