How to recognize fake mail.com emails

If you receive an unexpected email claiming to be from mail.com, it could be a phishing attempt by online scammers. This page will help you distinguish a fake email from a legitimate mail.com email.

Online scammers can send emails that look like real mail.com customer service or information emails at first glance. Since the sender name (a) can be freely chosen, scammers can use the same names that mail.com does. The sender address (b) often imitates real mail.com addresses, but upon closer inspection, you may notice small differences, such as swapped letters (e.g., "Serivce" instead of "Service"). To make the email appear legitimate, scammers may insert mail.com logos as images. The email text will usually urge you to take an action regarding your mail.com account, such as clicking a link. However, the links (c) in these emails lead to fake websites. You should never click on them.

Examples of fake mail.com emails:

You are notified of a mail.com invoice and asked to pay an outstanding amount.
You are warned that your mail.com Account will soon be deactivated and that you must click a link to prevent the deactivation.
You are accused of sending virus-infected emails and are asked to click a link and run a virus scan in order to prevent your account from being deactivated.
You are informed that your mail.com Account has been placed on a blocklist and that you need to verify your account by clicking a link.

How can I check the authenticity of an email?

In addition to general phishing prevention tips, there are several ways to check whether a mail.com email is legitimate.

Check the sender’s email address

Verify which email address the sender is using. If you are logged into your mail.com Account in a web browser, you can view the sender’s email address by clicking on the displayed sender name in the "From:" line of the opened email. If you are using the mail.com Mail app on Android, tap Show details below the sender’s name. In the mail.com Mail App for iOS, tap directly on the displayed sender’s name.

mail.com uses specific email addresses for general information, security notifications, account deactivation warnings, and invoices. If you receive an email from one of the following addresses, it is genuine:

Customer support:
support@corp.gmx.comcustomercare@corp.mail.com
General information, security notifications related to your account:
service@corp.gmx.comservice@corp.mail.com
Premium offers, e. g. upgrades:
service@premium.mail.com
Invoices from mail.com:
support@premium.mail.com

Info:

Scammers may use a sender address that looks very similar to a real mail.com address or even display an official mail.com sender name. Therefore, always check the email address itself, not just the sender name. Carefully compare the sender address of the suspicious email with the official addresses listed above.

For invoice emails: Compare with your personal data in mail.com MyAccount

You can verify the details in an invoice email by comparing them with the billing information saved in the mail.com mail.com MyAccount settings. Go to Invoices in mail.com mail.com MyAccount and check your list of mail.com invoices. If there is no invoice matching the details in the email, it is likely a fake.

Optional: Have the email verified by our Postmaster service

If you have POP3/IMAP enabled and access your GMX emails through a third-party email program, you can have suspicious GMX emails checked for authenticity. In your email program, save the email in EML or MSG format. You can then upload this file to the Postmaster pages for verification.

What should I do if the email Is a phishing attempt?

Report it as phishing

If you suspect that an email is a phishing attempt, you can report it to us using the contact form on the Postmaster pages. If the authenticity check is negative, you have the option to report the email by clicking the 'Report Phishing' button.

Mark it as spam

Move the phishing email to the Spam folder in your mail.com inbox by marking it as spam.