Recently, we have seen that spammers are generating emails that look like a Greenvelope invitation but are actually phishing attempts attempting to steal your login information. They will often come directly from the email of someone you know and will require you to log into an account in order to view the invitation. Your security is a priority to us, so we've put together a list of ways to spot a fake Greenvelope invitation. 

How to Spot a Fake Email 

First, Greenvelope will never require you to log into an account in order to view the invitation. You can see an example of the fake invitation page below:

Legitimate Greenvelope emails will almost always come from one of the below addresses:

• greenvelope@greenvelope.com
• greenvelope@invites.greenvelope.com
• greenvelope@invitation.greenvelope.com
• greenvelope@greenvelope-email.com

Account and support emails will come from one of the following addresses:

• support@greenvelope.com
• sam@greenvelope.com 

In some rare cases, a business will send from their own email address, but the Reply-To email address will still always be a Greenvelope address and the "Open Invitation" button will always link to a Greenvelope address.

Real Greenvelope cards and invitations with always be hosted on the greenvelope.com domain. Any links in an email to a different domain should never be clicked on. (Most email clients allow you to hover over a link or button to see what address you will be taken to before you click on it). Please see this example of a legitimate Greenvelope invitation:

If your email provider supports BIMI logo and authentication (Gmail, Apple, Yahoo), you will see a blue checkmark and the Greenvelope triangle logo that verifies the emails are authentic. 

What to Do if You Receive a Fake Email

If you received a fake email, we suggest not clicking any of the links. If you have gone to the links and entered any login information, you will want to make sure to update your passwords for those accounts. If you clicked or downloaded anything, scan your device for possible malware. If you are unsure if an email is legitimate, you can forward it to support@greenvelope.com to ask for confirmation.

If someone is receiving invitations from you, this likely means your email has been compromised. Similarly, update all passwords and scan for malware. Enabling two-factor authentication for your accounts will also help prevent them from being compromised in the future. You will also want to let those who received the invitation know to do the same if they entered any login information.