Return-Path: <294-TKB-300.0.488779.0.0.60579.9.200050636-0-337@marketopages.twilio.com>
Delivered-To: [email protected]
Received: from mgh-web11.maghost.ro
by mgh-web11.maghost.ro with LMTP
id aNIEJR3yJWkcqQIAJwI5NA
(envelope-from <294-TKB-300.0.488779.0.0.60579.9.200050636-0-337@marketopages.twilio.com>)
for ; Tue, 25 Nov 2025 20:14:53 +0200
Return-path: <294-TKB-300.0.488779.0.0.60579.9.200050636-0-337@marketopages.twilio.com>
Envelope-to: [email protected]
Delivery-date: Tue, 25 Nov 2025 20:14:53 +0200
Received: from o6.smtpgw.twilio.com ([149.72.185.22]:50714)
by mgh-web11.maghost.ro with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98)
(envelope-from <294-TKB-300.0.488779.0.0.60579.9.200050636-0-337@marketopages.twilio.com>)
id 1vNxZ1-00000000jpC-0eeP
for [email protected];
Tue, 25 Nov 2025 20:14:53 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=marketopages.twilio.com;
h=date:from:subject:mime-version:content-type:list-unsubscribe-post:
list-unsubscribe:reply-to:to:cc:content-type:date:from:subject:to;
s=s1; bh=1dReIqhhUAbtOyoviUGsk6KwBZWqJY77JDSteSp/WWc=;
b=rHkk8yllDH5L41gp8wj5Cp1HY5zjfcstbW6hju8++MoP5zruE80QouuDnB36DuU92atJ
I23TjfZUiexKesZ/h4OGazvxI1YXeIwr9dIhiNQyP0EqxGEU/kMQpAABFyLd/KLTtCBut0
lJDKTZveG+kXrH5+nXrPmhTji7sVyw4ZZDcWnY0akiN4g5mYTw8IJUbijKkvuyuwDKwRXB
4iW76K/ZXFydXjXth7C+/8hs05kW0KoqU8/iMV0qiP55XeI3onuGT4zEh1+cfWEpjoHza4
gP/4Gups9Cmcf3zvgtJTlc/vl0Aj33N4BDG2CoDQUKSR3EIbs8NcVjzA4oV2xN7Q==
Received: by recvd-586cc6856c-v5nz5 with SMTP id recvd-586cc6856c-v5nz5-1-6925F1F3-4A
2025-11-25 18:14:11.650029652 +0000 UTC m=+15038985.666186822
Received: from marketopages.twilio.com (unknown)
by geopod-ismtpd-1 (SG)
with ESMTP id 9zWcNgtQSAS-nYX0cb1X2g
for ;
Tue, 25 Nov 2025 18:14:11.564 +0000 (UTC)
X-MSFBL: 9yA71G+Jgo9O+Hend8Sbc38cHaBUUNnpSIxIIUYId9w=|eyJnIjoiYmctc2pkLTM
wOSIsInIiOiJjaGFybGVzX25pY2hvbHNAbmF0dXJhbGxpZ2h0cy5iaXoiLCJ1Ijo
iMjk0LVRLQi0zMDA6MDo2MDI1ODo2MDg0NTg6MTY1ODA1Nzo2MDU3OTo5OjQ4ODc
3OToyMDAwNTA2MzYtMC0zMzciLCJiIjoiZHZwLTE5Mi0yOC0xNDctNTQifQ==
Date: Tue, 25 Nov 2025 18:14:11 +0000 (UTC)
From: Team Twilio
Message-ID: <[email protected]>
Subject: Stay alert: How to spot fraud and fake Twilio and Twilio SendGrid
emails
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_217548594_883614110.1764094158698"
X-Binding: bg-sjd-309
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-Unsubscribe:
=?us-ascii?Q?=3Chttps=3A=2F=2Flinks=2Etwilio=2Ecom=2Fu=2FMjk0LVRLQi0zMDAAAAGeWy1XYrGRWqk3m-?=
=?us-ascii?Q?IVd7Q=5F1Hj0akP3GjCqYlACORYSA4JK0g04ibigz?=
=?us-ascii?Q?ormQJUGdh2NCdIKL8IyCmAPaEg=3D=3FemailAddres?=
=?us-ascii?Q?s=3DMjk0LVRLQi0zMDAAAAGeWy1XYeBSXg4Kj=5Fv7A?=
=?us-ascii?Q?4DbYwOqFeCjH8o8uSFrdCPwFNYpfUcXkcK-A0IL?=
=?us-ascii?Q?1ks3dlzZp1tLYTCLXPq4KvnkzdWUDqs=3E=2C?=
=?us-ascii?Q?_=3Cmailto=3AK52HGVKPGEZHE5KYOE2VGU3IM5BHS3BUIVZUM2KPJRZVI2SYGU3ES2?=
=?us-ascii?Q?3PHBZUYVJSPJWXGPI=3D=2E488779=2E60579=2E9=40unsub?=
=?us-ascii?Q?-sj=2Emktomail=2Ecom=3E?=
X-MarketoID: 294-TKB-300:0:60258:608458:1658057:60579:9:488779:200050636-0-337
X-PVIQ: mkto-294TKB300-000001-000000-488779
X-Mailfrom: 294-TKB-300.0.488779.0.0.60579.9.200050636-0-337@marketopages.twilio.com
X-MktArchive: false
X-MSYS-API: {"options":{"open_tracking":false,"click_tracking":false}}
X-MktMailDKIM: true
Reply-To: [email protected]
X-SG-EID:
=?us-ascii?Q?u001=2ENk4spDgCPTkiaqJ1ovlm5OVvN=2F419hHXNHc1eiYabNdfwKlSndKrEQwm+?=
=?us-ascii?Q?iK3TA6Qo2X4maGhncX12GLyzEhCJDO4E=2FmfjVwG?=
=?us-ascii?Q?LQkBtiqVXUxSrPfisW6iUPhefFccmK127Os+y=2FN?=
=?us-ascii?Q?2Td0=2Fpk=2FZYDdRER3Xohd91OV37vcwwXiizVZcS=2F?=
=?us-ascii?Q?LN5kQma1yG8xaraGbjGhZ0Z1vt0VzwiMLKXPN1k?=
=?us-ascii?Q?stwPE3OlUav9p7tLknd9lpkJFosaXoXEoktB=2FCK?=
=?us-ascii?Q?nCkipeTkhRhY0VIlkjIYhM4p5w=3D=3D?=
To: [email protected]
X-Entity-ID: u001.7NTIIhlvlkaVHfbCmGrlEw==
------=_Part_217548594_883614110.1764094158698
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Black Friday and Cyber Monday are just around the corner, and we know you=
=E2=80=99re focused on connecting with customers during one of the busiest =
times of the year. With higher traffic volumes, it=E2=80=99s also not uncom=
mon to see a little extra noise from bad actors.
We=E2=80=99re reaching out about this so you can spot these signals early a=
nd protect yourself and your customers. In that same spirit of preparedness=
, we also want to help you brush up on account security since we=E2=80=99ve=
seen an increase in phishing campaigns that attempt to impersonate Twilio =
and Twilio SendGrid.
These brand spoofing attempts can be convincing, but there are clear signs =
to watch for. Here=E2=80=99s how to spot them and keep your account secure.
How to spot brand impersonation and other suspicious messages
If you receive an unexpected email claiming to be from Twilio or SendGrid, =
watch for these red flags:
- Fake domains or sender addresses: Scammers register domains that look alm=
ost identical to ours, like using =E2=80=9Ctwiliio.com=E2=80=9D (with two i=
's) instead of =E2=80=9Ctwilio.com =E2=80=9D
- Copied branding: Bad actors may steal our logos, colors, and email templ=
ates to make their messages look authentic. Just because an email has a Twi=
lio or SendGrid logo doesn't mean it came from us. Always check the sender =
and the actual domain the email came from.
- Lookalike websites and suspicious URLs: Fake login pages are designed to=
mimic our Console or SendGrid interface, often using URLs that are just on=
e or two characters different from the real thing.
- Urgent language: Twilio does occasionally send time-sensitive notificati=
ons when there are real issues affecting your account. Legitimate Twilio al=
erts will direct you to the Twilio Console to resolve issues, and we=E2=80=
=99ll never ask you to verify your account or share sensitive information v=
ia email. However, scammers will use urgency to trick you into acting witho=
ut thinking.
We'll never ask you to share your password, two-factor authentication codes=
, or recovery codes and we'll never request payment through gift cards or c=
ryptocurrency. If someone claiming to be from Twilio asks for these things,=
it's not us.=20
If you receive any suspicious messages, please forward them to the Twilio F=
raud team at [email protected] and we'll investigate.
What to do if you've already clicked a link or entered information
We understand this can happen, and we recommend taking these steps to secur=
e your account right away:
- Stop interacting with the site immediately: Close the website and don't e=
nter any additional information.
- Change your passwords right away: Update your Twilio or SendGrid passwor=
d immediately, and if you've used that password anywhere else, change those=
too. If you're a SendGrid account owner, we recommend updating passwords f=
or your teammates as well. For Twilio accounts, consider updating passwords=
for other users on your account. Using unique passwords for each service h=
elps protect you.
- Add two-factor authentication to your account: Adding this extra layer o=
f security makes it much harder for anyone to access your account, even if =
they have your password. Follow this guide to set up two-factor authenticat=
ion on your Twilio account and this guide for setting it up in Twilio SendGrid .
- Rotate your API credentials: This ensures that any compromised keys can'=
t be used to access your account.
- Review your recent account activity: Look for anything unexpected, like =
changes to your settings or API calls you didn't make. If you spot somethin=
g concerning, let us know right away.
- Reach out to our Twilio Help Center Assistant: If you have any questions=
, visit our Twilio Help Center Assistant for more information on keeping your account s=
ecure.
Need a hand?
For more information about protecting your account and more, check out thes=
e resources:
- Enable Two-Factor Authentication on your Twilio Account
- How to change your Twilio password
- Anti-Fraud Developer's Guide
- Twilio Trust Center
- Auth Tokens and How to Change Them
- Proactive Steps for Customers Experiencing Account Takeover
- October 2025 Fraud Update: How ISVs can Prepare for the Holiday Season <=
https://u3528416.ct.sendgrid.net/ls/click?upn=3Du001.g2DXLgXBUJK96crKtJKHYI=
LvaX7M6fauqf5QqJEW0CN4nzOJ-2BjxPDYnpBzDaW8gc0aEP0sGESd4YTwyYMMEnhXfBY0f9Ctw=
9iQuEApdPC2VDSPJ65bkljMig5N2neuPkG-2FADGNqEFcCy5w1hIOk2HBw-2BiJ9saoTpcXlQYc=
qu5CmWeDsE1Xj-2BUafd1fu94IjE_2EP_fylF09WDx4VRLHs1TE6by-2BBG7a-2FGCqEfGCn-2B=
cOhNwQAU-2FjVnSSErjkqbG0-2F422WlhgmXpyRSc68Dd9TpoAucS8tAnbU-2FNhO0yJ5j7qnpa=
UtkhIsVfpeK-2BNJV7CpYAt6DtLTyA7ggOvCZNavgKzmOnW3XKSHiMNse1iOnjgAtDEvhe6tX4g=
lClGQ2ruoatPR8iVVTXONEIOnBG4vOllwJzzAa1iU2I0SQS7ugUL6S33k-3D>
- Setting Up Two-Factor Authentication | Twilio SendGrid
- Compromised Account Recovery | Twilio SendGrid
- Forced Password Reset FAQ | Twilio SendGrid
Thanks for building with Twilio.
=E2=80=93Team Twilio
=C2=A9 2025 Twilio. All rights reserved. 101 Spear Street, United States
=20
This email was sent to [email protected]=
.=20
Don't want to receive emails from Twilio? Change your email preferences <[=
[https://u3528416.ct.sendgrid.net/ls/click?upn=3Du001.g2DXLgXBUJK96crKtJKHY=
JhdQzWUwevCcpkVZ-2BwQnMrENWUgR4nsTsUBFnCObqRLrdisK0982fFluYSI3zG2HRHzaQilNI=
QVuMFf3ihxv6f2kheC5Sgzap061q3FSzl03n1onisOT-2BfA0oy-2BAXrcgTGyXm5bxwcR65Lo8=
oBCFhi288qEYRgnCbWtLLndm-2B1rPbdB5fQqyY-2BI8oSSSb8L4DH5YBE8mqq25mmJ1QnWcTCc=
JRPWUlCVmJ2Dld1siBr-2BLVw4bL2QwcOA-2BWkYVMFd5tDPNpa7DxH-2B7joIR9yA2lA-3DrsP=
C_fylF09WDx4VRLHs1TE6by-2BBG7a-2FGCqEfGCn-2BcOhNwQAU-2FjVnSSErjkqbG0-2F422W=
lhgmXpyRSc68Dd9TpoAucS0FhV5rGTvEDE-2F-2FIzAGWAj8cIu-2F4tb1Cpy-2BIXOY41V4Iyd=
ns5MT1zGQHDYaK-2B5L03VgDU7DENnTvw2y2z5GebgLWl7ITxO4sHjssKR9lXDToEjZADF-2F9s=
X-2BCvba4ihfa2i2cnbjzat3G-2Ba5v91PkllA-3D]]>. If you have any questions or =
concerns, please contact us at https://u3528416.ct.sendgrid.net/ls/click?up=
n=3Du001.g2DXLgXBUJK96crKtJKHYJag6-2FVowGcAS5R6GBurP1o4PKde0c3hl4L69JXcW8Fp=
G_l7_fylF09WDx4VRLHs1TE6by-2BBG7a-2FGCqEfGCn-2BcOhNwQAU-2FjVnSSErjkqbG0-2F4=
22WlhgmXpyRSc68Dd9TpoAucSyfM6L7wza6VVlS-2FFvuxNCxJNc7WW5rxZRgtNnnUcaGVYOka6=
ZPUDgXyyk7sjlI3kctPhumMEohYmtSh1EdLnferoYS8AGIKeyPRmDZ2uHlKl1WcHrJy-2Fq37Su=
8AT9KfGoUcGfQRyHI6U8pla1d-2B-2F1c-3D .
=20
View in Browser <[[https://u3528416.ct.sendgrid.net/ls/click?upn=3Du001.g2D=
XLgXBUJK96crKtJKHYILvaX7M6fauqf5QqJEW0CM4jAoxTaRxGgeNIsZQLL6AhNSxJ67u136I56=
ohNrnip1-2FjSLp67PORiZ26PL5-2FOIS7xw9pM9-2FAKgLE22XnBiLVFVaMzpnnpaltOY8ZnNc=
r-2BSsFD7SiP0cooCXyMcarSz2LJP332g6memacrFqqVruEmg-v_fylF09WDx4VRLHs1TE6by-2=
BBG7a-2FGCqEfGCn-2BcOhNwQAU-2FjVnSSErjkqbG0-2F422WlhgmXpyRSc68Dd9TpoAucSxfL=
Gzk5Bu06e6pWPM3OKGk-2FQceXy7SIWe0IEjkydFXZZW547TDekx5E9gBMNsy03D2aNkh9iMUap=
oqT4xJvn-2Fr65j-2FKHJTSFxb42o-2BTzj3Oe3RXegliwyJ2q9WKacwKxNielkfqV2w62DpWlV=
uQsYk-3D]]>
Privacy Policy
Unsubscribe <[[https://u3528416.ct.sendgrid.net/ls/click?upn=3Du001.g2DXLgX=
BUJK96crKtJKHYJhdQzWUwevCcpkVZ-2BwQnMrENWUgR4nsTsUBFnCObqRLrdisK0982fFluYSI=
3zG2HRHzaQilNIQVuMFf3ihxv6f2kheC5Sgzap061q3FSzl03n1onisOT-2BfA0oy-2BAXrcgTG=
yXm5bxwcR65Lo8oBCFhi288qEYRgnCbWtLLndm-2B1rPbdB5fQqyY-2BI8oSSSb8L4DH5YBE8mq=
q25mmJ1QnWcTCcJRPWUlCVmJ2Dld1siBr-2BLVw4bL2QwcOA-2BWkYVMFd5tDPNpa7DxH-2B7jo=
IR9yA2lA-3D3RQE_fylF09WDx4VRLHs1TE6by-2BBG7a-2FGCqEfGCn-2BcOhNwQAU-2FjVnSSE=
rjkqbG0-2F422WlhgmXpyRSc68Dd9TpoAucS-2BMwp4KevKiuhNirhzYp0x1E8Gyx-2FHroFZCN=
X8jbMm4Jd53GwCC7XBy0WMkcgORSONwtK9-2Fh29h-2Ftg9WbN-2F4HYvesku5z1JOmzKPlIWwa=
7oCy9lLSwHa9MjGCUAh9GshMvzAaNk6ljjupyrFvSFDO9E-3D]]>
------=_Part_217548594_883614110.1764094158698
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
=20
=
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=
=
=20
=20
=20
=20
=20
=20
Twilio=20
=20
=20
=20
=20
=20
How to recognize and=
report fraud and phishing attempts that impersonate Twilio and Twilio Send=
Grid.
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
Black Friday and Cyber Monday are just a=
round the corner, and we know you=E2=80=99re focused on connecting with cus=
tomers during one of the busiest times of the year. With higher traffic vol=
umes, it=E2=80=99s also not uncommon to see a little extra noise from bad a=
ctors.
=20
We=E2=80=99re reaching out about t=
his so you can spot these signals early and protect yourself and your custo=
mers. In that same spirit of preparedness, we also want to help you brush u=
p on account security since we=E2=80=99ve seen an increase in phishing camp=
aigns that attempt to impersonate Twilio and Twilio SendGrid. <=
/p>=20
These brand spoofing attempts can =
be convincing, but there are clear signs to watch for. Here=E2=80=99s how t=
o spot them and keep your account secure.
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
How to spot brand impersonation and other suspicious messa=
ges
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
If you receive an unexpected email claiming to be from Twilio or SendGri=
d, watch for these red flags:
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
Fake domains or sender addresse=
s: Scammers register domains that look almost identical to ours, l=
ike using =E2=80=9Ctwiliio.com=E2=80=9D (with two i's) instead of =
=E2=80=9Ctwilio.com=E2=80=9D
=20
Copied branding: Bad a=
ctors may steal our logos, colors, and email templates to make their messag=
es look authentic. Just because an email has a Twilio or SendGrid logo does=
n't mean it came from us. Always check the sender and the actual domain the=
email came from.
=20
Lookalike websites and suspicio=
us URLs: Fake login pages are designed to mimic our Console or Sen=
dGrid interface, often using URLs that are just one or two characters diffe=
rent from the real thing.
=20
Urgent language: Twili=
o does occasionally send time-sensitive notifications when there are real i=
ssues affecting your account. Legitimate Twilio alerts will direct you to t=
he Twilio Console to resolve issues, and we=E2=80=99ll never ask you to ver=
ify your account or share sensitive information via email. However, scammer=
s will use urgency to trick you into acting without thinking.
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
We'll never ask you to =
share your password, two-factor authentication codes, or recovery codes and=
we'll never request payment through gift cards or cryptocurrency. If someo=
ne claiming to be from Twilio asks for these things, it's not us. If you receive a=
ny suspicious messages, please forward them to the Twilio Fraud team at [email protected]and we'll investigate.
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
What to do if you've already clicked a link or entered inf=
ormation
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
We understand this can ha=
ppen, and we recommend taking these steps to secure your account right away=
:
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
Stop interacting with the site =
immediately: Close the website and don't enter any additional info=
rmation.
=20
Change your passwords right awa=
y: Update your Twilio or SendGrid password immediately, and if you=
've used that password anywhere else, change those too. If you're a SendGri=
d account owner, we recommend updating passwords for your teammates as well=
. For Twilio accounts, consider updating passwords for other users on your =
account. Using unique passwords for each service helps protect you.<=
/li>=20
Rotate your API credentials: =
strong>This ensures that any compromised keys can't be used to access your =
account.
=20
Review your recent account acti=
vity: Look for anything unexpected, like changes to your settings =
or API calls you didn't make. If you spot something concerning, let us know=
right away.
=20
Reach out to our Twilio Help Ce=
nter Assistant: If you have any questions, visit ourTwilio Help Center Assistantfo=
r more information on keeping your account secure.
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
Need a hand?
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
=20
For more information ab=
out protecting your account and more, check out these resources: