phishing ?? | Community
Skip to main content
Newcomer
November 1, 2022
Solved

phishing ??

  • November 1, 2022
  • 11 replies
  • 118 views

Received an email that looks like phishing but is cleverly made (header below).

Is there a service at zoom I can forward this to to verify authenticity?

 

email is from workflow at zuora.com

-------------------------------------

Zoom <***********> Unsubscribe
6:34 PM (1 hour ago)
to me

Zoom Logo
SIGN IN
Your Payment Method on file is expiring soon!

    Best answer by S_K

    @jb10 @Preserver17 @Indigokat @NoirinC @vhamilton - Hi everyone!

     

    Thanks for reaching out in Zoom Community about this email. I love seeing people being cautious with unexpected emails! Good on you for asking about it!

     

    This is indeed a legitimate notification. It is sent to prevent possible loss of service due to failed payments caused by expired credit cards on file. As with any unexpected emails, it's always a good practice to not click links but rather to log directly into your Zoom account to check on this information. 

     

    Reference: Updating Your Credit Card 

     

    We are working to update our knowledge base to include this information in select articles, including a list of emails and IP addresses you can expect notifications to come from.

     

    Cheers!

    ~S

    11 replies

    Newcomer
    August 6, 2025

    Received a really clever phishing email from "Purchase Recorded" <***********> to <***********> but got delivered to 1 user in my organization. Bypassed all security checks.

     

    Submitting Host ----- Receiving Host details:

    o25.sg.zoom.us ([159.183.187.77]:16188) ---- wp59.host-ww.net

    wp59.host-ww.net ([102.210.146.102]) ----- mx315.antispamcloud.com

    out15-53.antispamcloud.com (185.201.19.53) ---- Organization