Return-Path: <294-TKB-300.0.488779.0.0.60579.9.200050636-0-337@marketopages.twilio.com> Delivered-To: [email protected] Received: from mgh-web11.maghost.ro by mgh-web11.maghost.ro with LMTP id aNIEJR3yJWkcqQIAJwI5NA (envelope-from <294-TKB-300.0.488779.0.0.60579.9.200050636-0-337@marketopages.twilio.com>) for ; Tue, 25 Nov 2025 20:14:53 +0200 Return-path: <294-TKB-300.0.488779.0.0.60579.9.200050636-0-337@marketopages.twilio.com> Envelope-to: [email protected] Delivery-date: Tue, 25 Nov 2025 20:14:53 +0200 Received: from o6.smtpgw.twilio.com ([149.72.185.22]:50714) by mgh-web11.maghost.ro with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.98) (envelope-from <294-TKB-300.0.488779.0.0.60579.9.200050636-0-337@marketopages.twilio.com>) id 1vNxZ1-00000000jpC-0eeP for [email protected]; Tue, 25 Nov 2025 20:14:53 +0200 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=marketopages.twilio.com; h=date:from:subject:mime-version:content-type:list-unsubscribe-post: list-unsubscribe:reply-to:to:cc:content-type:date:from:subject:to; s=s1; bh=1dReIqhhUAbtOyoviUGsk6KwBZWqJY77JDSteSp/WWc=; b=rHkk8yllDH5L41gp8wj5Cp1HY5zjfcstbW6hju8++MoP5zruE80QouuDnB36DuU92atJ I23TjfZUiexKesZ/h4OGazvxI1YXeIwr9dIhiNQyP0EqxGEU/kMQpAABFyLd/KLTtCBut0 lJDKTZveG+kXrH5+nXrPmhTji7sVyw4ZZDcWnY0akiN4g5mYTw8IJUbijKkvuyuwDKwRXB 4iW76K/ZXFydXjXth7C+/8hs05kW0KoqU8/iMV0qiP55XeI3onuGT4zEh1+cfWEpjoHza4 gP/4Gups9Cmcf3zvgtJTlc/vl0Aj33N4BDG2CoDQUKSR3EIbs8NcVjzA4oV2xN7Q== Received: by recvd-586cc6856c-v5nz5 with SMTP id recvd-586cc6856c-v5nz5-1-6925F1F3-4A 2025-11-25 18:14:11.650029652 +0000 UTC m=+15038985.666186822 Received: from marketopages.twilio.com (unknown) by geopod-ismtpd-1 (SG) with ESMTP id 9zWcNgtQSAS-nYX0cb1X2g for ; Tue, 25 Nov 2025 18:14:11.564 +0000 (UTC) X-MSFBL: 9yA71G+Jgo9O+Hend8Sbc38cHaBUUNnpSIxIIUYId9w=|eyJnIjoiYmctc2pkLTM wOSIsInIiOiJjaGFybGVzX25pY2hvbHNAbmF0dXJhbGxpZ2h0cy5iaXoiLCJ1Ijo iMjk0LVRLQi0zMDA6MDo2MDI1ODo2MDg0NTg6MTY1ODA1Nzo2MDU3OTo5OjQ4ODc 3OToyMDAwNTA2MzYtMC0zMzciLCJiIjoiZHZwLTE5Mi0yOC0xNDctNTQifQ== Date: Tue, 25 Nov 2025 18:14:11 +0000 (UTC) From: Team Twilio Message-ID: <[email protected]> Subject: Stay alert: How to spot fraud and fake Twilio and Twilio SendGrid emails MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_217548594_883614110.1764094158698" X-Binding: bg-sjd-309 List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: =?us-ascii?Q?=3Chttps=3A=2F=2Flinks=2Etwilio=2Ecom=2Fu=2FMjk0LVRLQi0zMDAAAAGeWy1XYrGRWqk3m-?= =?us-ascii?Q?IVd7Q=5F1Hj0akP3GjCqYlACORYSA4JK0g04ibigz?= =?us-ascii?Q?ormQJUGdh2NCdIKL8IyCmAPaEg=3D=3FemailAddres?= =?us-ascii?Q?s=3DMjk0LVRLQi0zMDAAAAGeWy1XYeBSXg4Kj=5Fv7A?= =?us-ascii?Q?4DbYwOqFeCjH8o8uSFrdCPwFNYpfUcXkcK-A0IL?= =?us-ascii?Q?1ks3dlzZp1tLYTCLXPq4KvnkzdWUDqs=3E=2C?= =?us-ascii?Q?_=3Cmailto=3AK52HGVKPGEZHE5KYOE2VGU3IM5BHS3BUIVZUM2KPJRZVI2SYGU3ES2?= =?us-ascii?Q?3PHBZUYVJSPJWXGPI=3D=2E488779=2E60579=2E9=40unsub?= =?us-ascii?Q?-sj=2Emktomail=2Ecom=3E?= X-MarketoID: 294-TKB-300:0:60258:608458:1658057:60579:9:488779:200050636-0-337 X-PVIQ: mkto-294TKB300-000001-000000-488779 X-Mailfrom: 294-TKB-300.0.488779.0.0.60579.9.200050636-0-337@marketopages.twilio.com X-MktArchive: false X-MSYS-API: {"options":{"open_tracking":false,"click_tracking":false}} X-MktMailDKIM: true Reply-To: [email protected] X-SG-EID: =?us-ascii?Q?u001=2ENk4spDgCPTkiaqJ1ovlm5OVvN=2F419hHXNHc1eiYabNdfwKlSndKrEQwm+?= =?us-ascii?Q?iK3TA6Qo2X4maGhncX12GLyzEhCJDO4E=2FmfjVwG?= =?us-ascii?Q?LQkBtiqVXUxSrPfisW6iUPhefFccmK127Os+y=2FN?= =?us-ascii?Q?2Td0=2Fpk=2FZYDdRER3Xohd91OV37vcwwXiizVZcS=2F?= =?us-ascii?Q?LN5kQma1yG8xaraGbjGhZ0Z1vt0VzwiMLKXPN1k?= =?us-ascii?Q?stwPE3OlUav9p7tLknd9lpkJFosaXoXEoktB=2FCK?= =?us-ascii?Q?nCkipeTkhRhY0VIlkjIYhM4p5w=3D=3D?= To: [email protected] X-Entity-ID: u001.7NTIIhlvlkaVHfbCmGrlEw== ------=_Part_217548594_883614110.1764094158698 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Black Friday and Cyber Monday are just around the corner, and we know you= =E2=80=99re focused on connecting with customers during one of the busiest = times of the year. With higher traffic volumes, it=E2=80=99s also not uncom= mon to see a little extra noise from bad actors. We=E2=80=99re reaching out about this so you can spot these signals early a= nd protect yourself and your customers. In that same spirit of preparedness= , we also want to help you brush up on account security since we=E2=80=99ve= seen an increase in phishing campaigns that attempt to impersonate Twilio = and Twilio SendGrid. These brand spoofing attempts can be convincing, but there are clear signs = to watch for. Here=E2=80=99s how to spot them and keep your account secure. How to spot brand impersonation and other suspicious messages If you receive an unexpected email claiming to be from Twilio or SendGrid, = watch for these red flags: - Fake domains or sender addresses: Scammers register domains that look alm= ost identical to ours, like using =E2=80=9Ctwiliio.com=E2=80=9D (with two i= 's) instead of =E2=80=9Ctwilio.com =E2=80=9D - Copied branding: Bad actors may steal our logos, colors, and email templ= ates to make their messages look authentic. Just because an email has a Twi= lio or SendGrid logo doesn't mean it came from us. Always check the sender = and the actual domain the email came from. - Lookalike websites and suspicious URLs: Fake login pages are designed to= mimic our Console or SendGrid interface, often using URLs that are just on= e or two characters different from the real thing. - Urgent language: Twilio does occasionally send time-sensitive notificati= ons when there are real issues affecting your account. Legitimate Twilio al= erts will direct you to the Twilio Console to resolve issues, and we=E2=80= =99ll never ask you to verify your account or share sensitive information v= ia email. However, scammers will use urgency to trick you into acting witho= ut thinking. We'll never ask you to share your password, two-factor authentication codes= , or recovery codes and we'll never request payment through gift cards or c= ryptocurrency. If someone claiming to be from Twilio asks for these things,= it's not us.=20 If you receive any suspicious messages, please forward them to the Twilio F= raud team at [email protected] and we'll investigate. What to do if you've already clicked a link or entered information We understand this can happen, and we recommend taking these steps to secur= e your account right away: - Stop interacting with the site immediately: Close the website and don't e= nter any additional information. - Change your passwords right away: Update your Twilio or SendGrid passwor= d immediately, and if you've used that password anywhere else, change those= too. If you're a SendGrid account owner, we recommend updating passwords f= or your teammates as well. For Twilio accounts, consider updating passwords= for other users on your account. Using unique passwords for each service h= elps protect you. - Add two-factor authentication to your account: Adding this extra layer o= f security makes it much harder for anyone to access your account, even if = they have your password. Follow this guide to set up two-factor authenticat= ion on your Twilio account and this guide for setting it up in Twilio SendGrid . - Rotate your API credentials: This ensures that any compromised keys can'= t be used to access your account. - Review your recent account activity: Look for anything unexpected, like = changes to your settings or API calls you didn't make. If you spot somethin= g concerning, let us know right away. - Reach out to our Twilio Help Center Assistant: If you have any questions= , visit our Twilio Help Center Assistant for more information on keeping your account s= ecure. Need a hand? For more information about protecting your account and more, check out thes= e resources: - Enable Two-Factor Authentication on your Twilio Account - How to change your Twilio password - Anti-Fraud Developer's Guide - Twilio Trust Center - Auth Tokens and How to Change Them - Proactive Steps for Customers Experiencing Account Takeover - October 2025 Fraud Update: How ISVs can Prepare for the Holiday Season <= https://u3528416.ct.sendgrid.net/ls/click?upn=3Du001.g2DXLgXBUJK96crKtJKHYI= LvaX7M6fauqf5QqJEW0CN4nzOJ-2BjxPDYnpBzDaW8gc0aEP0sGESd4YTwyYMMEnhXfBY0f9Ctw= 9iQuEApdPC2VDSPJ65bkljMig5N2neuPkG-2FADGNqEFcCy5w1hIOk2HBw-2BiJ9saoTpcXlQYc= qu5CmWeDsE1Xj-2BUafd1fu94IjE_2EP_fylF09WDx4VRLHs1TE6by-2BBG7a-2FGCqEfGCn-2B= cOhNwQAU-2FjVnSSErjkqbG0-2F422WlhgmXpyRSc68Dd9TpoAucS8tAnbU-2FNhO0yJ5j7qnpa= UtkhIsVfpeK-2BNJV7CpYAt6DtLTyA7ggOvCZNavgKzmOnW3XKSHiMNse1iOnjgAtDEvhe6tX4g= lClGQ2ruoatPR8iVVTXONEIOnBG4vOllwJzzAa1iU2I0SQS7ugUL6S33k-3D> - Setting Up Two-Factor Authentication | Twilio SendGrid - Compromised Account Recovery | Twilio SendGrid - Forced Password Reset FAQ | Twilio SendGrid Thanks for building with Twilio. =E2=80=93Team Twilio =C2=A9 2025 Twilio. All rights reserved. 101 Spear Street, United States =20 This email was sent to [email protected] = .=20 Don't want to receive emails from Twilio? Change your email preferences <[= [https://u3528416.ct.sendgrid.net/ls/click?upn=3Du001.g2DXLgXBUJK96crKtJKHY= JhdQzWUwevCcpkVZ-2BwQnMrENWUgR4nsTsUBFnCObqRLrdisK0982fFluYSI3zG2HRHzaQilNI= QVuMFf3ihxv6f2kheC5Sgzap061q3FSzl03n1onisOT-2BfA0oy-2BAXrcgTGyXm5bxwcR65Lo8= oBCFhi288qEYRgnCbWtLLndm-2B1rPbdB5fQqyY-2BI8oSSSb8L4DH5YBE8mqq25mmJ1QnWcTCc= JRPWUlCVmJ2Dld1siBr-2BLVw4bL2QwcOA-2BWkYVMFd5tDPNpa7DxH-2B7joIR9yA2lA-3DrsP= C_fylF09WDx4VRLHs1TE6by-2BBG7a-2FGCqEfGCn-2BcOhNwQAU-2FjVnSSErjkqbG0-2F422W= lhgmXpyRSc68Dd9TpoAucS0FhV5rGTvEDE-2F-2FIzAGWAj8cIu-2F4tb1Cpy-2BIXOY41V4Iyd= ns5MT1zGQHDYaK-2B5L03VgDU7DENnTvw2y2z5GebgLWl7ITxO4sHjssKR9lXDToEjZADF-2F9s= X-2BCvba4ihfa2i2cnbjzat3G-2Ba5v91PkllA-3D]]>. If you have any questions or = concerns, please contact us at https://u3528416.ct.sendgrid.net/ls/click?up= n=3Du001.g2DXLgXBUJK96crKtJKHYJag6-2FVowGcAS5R6GBurP1o4PKde0c3hl4L69JXcW8Fp= G_l7_fylF09WDx4VRLHs1TE6by-2BBG7a-2FGCqEfGCn-2BcOhNwQAU-2FjVnSSErjkqbG0-2F4= 22WlhgmXpyRSc68Dd9TpoAucSyfM6L7wza6VVlS-2FFvuxNCxJNc7WW5rxZRgtNnnUcaGVYOka6= ZPUDgXyyk7sjlI3kctPhumMEohYmtSh1EdLnferoYS8AGIKeyPRmDZ2uHlKl1WcHrJy-2Fq37Su= 8AT9KfGoUcGfQRyHI6U8pla1d-2B-2F1c-3D . =20 View in Browser <[[https://u3528416.ct.sendgrid.net/ls/click?upn=3Du001.g2D= XLgXBUJK96crKtJKHYILvaX7M6fauqf5QqJEW0CM4jAoxTaRxGgeNIsZQLL6AhNSxJ67u136I56= ohNrnip1-2FjSLp67PORiZ26PL5-2FOIS7xw9pM9-2FAKgLE22XnBiLVFVaMzpnnpaltOY8ZnNc= r-2BSsFD7SiP0cooCXyMcarSz2LJP332g6memacrFqqVruEmg-v_fylF09WDx4VRLHs1TE6by-2= BBG7a-2FGCqEfGCn-2BcOhNwQAU-2FjVnSSErjkqbG0-2F422WlhgmXpyRSc68Dd9TpoAucSxfL= Gzk5Bu06e6pWPM3OKGk-2FQceXy7SIWe0IEjkydFXZZW547TDekx5E9gBMNsy03D2aNkh9iMUap= oqT4xJvn-2Fr65j-2FKHJTSFxb42o-2BTzj3Oe3RXegliwyJ2q9WKacwKxNielkfqV2w62DpWlV= uQsYk-3D]]> Privacy Policy Unsubscribe <[[https://u3528416.ct.sendgrid.net/ls/click?upn=3Du001.g2DXLgX= BUJK96crKtJKHYJhdQzWUwevCcpkVZ-2BwQnMrENWUgR4nsTsUBFnCObqRLrdisK0982fFluYSI= 3zG2HRHzaQilNIQVuMFf3ihxv6f2kheC5Sgzap061q3FSzl03n1onisOT-2BfA0oy-2BAXrcgTG= yXm5bxwcR65Lo8oBCFhi288qEYRgnCbWtLLndm-2B1rPbdB5fQqyY-2BI8oSSSb8L4DH5YBE8mq= q25mmJ1QnWcTCcJRPWUlCVmJ2Dld1siBr-2BLVw4bL2QwcOA-2BWkYVMFd5tDPNpa7DxH-2B7jo= IR9yA2lA-3D3RQE_fylF09WDx4VRLHs1TE6by-2BBG7a-2FGCqEfGCn-2BcOhNwQAU-2FjVnSSE= rjkqbG0-2F422WlhgmXpyRSc68Dd9TpoAucS-2BMwp4KevKiuhNirhzYp0x1E8Gyx-2FHroFZCN= X8jbMm4Jd53GwCC7XBy0WMkcgORSONwtK9-2Fh29h-2Ftg9WbN-2F4HYvesku5z1JOmzKPlIWwa= 7oCy9lLSwHa9MjGCUAh9GshMvzAaNk6ljjupyrFvSFDO9E-3D]]> ------=_Part_217548594_883614110.1764094158698 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable =20 = =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 = = =20 =20 =20 =20 =20 =20 Twilio=20 =20 =20 =20 =20 =20
How to recognize and= report fraud and phishing attempts that impersonate Twilio and Twilio Send= Grid.
=20 =20
=20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20
=20

3D"twilio"

=20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20
=20 3D"Email_banner_Fraud_Ops_test.pn= =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20 =20 =20 =20 =20 =20
=20
=20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20
=20 =20
=20 =20 3D"" 3D"" ------=_Part_217548594_883614110.1764094158698--