Wix Phishing Emails - How to Report Spam/Phishing Emails + How to Recognize Them

Beware! Avoid engaging with Spam Wix Form Submissions & Scam Emails

Phishing is a fraudulent technique used to impersonate legitimate trusted sources in order to collect sensitive data such as passwords, account logins or details and credit card numbers. This is not isolated to just Wix websites, all website platforms and contact forms are subject to spammers and scammers. Wix website contact forms, like forms across all web platforms, are often used by spammers and phishers to reach out to website owners to try to sell them services by falsely stating they have bugs or errors in their website code.

To report any suspicious emails, visit Wix's web page here:

support.wix.com/en/article/identifying-and-reporting-phishing

On this page it mentions that you can forward the email directly to reportphishing@wix.com and include the full technical email headers.

See this fake spam submission below, this "Daniel Reeves" character submitted this exact same message using Wix website forms on multiple Wix websites. Note that these types of generic messages are just spam, myself and many other Wix Designers have seen this exact same message go out to other Wix contact forms. There are typically no serious errors or bugs in the Wix websites' code, this is just a phishing attempt to get people to reply or click on links, and worse, to send payments to them.

I recommend to clients that they mark/report these types of emails as spam and delete. Do NOT reply to these messages or click on any of the links.

Here's another example of another spam email to Wix website owners from the spammer identifying himself as "Daniel Reeves":

Spam Wix form submission text:

My name is Daniel, and I'm a Wix advisor.

Your website looks good, but it contains serious errors in the source code that make it difficult to find on Google. Below, I'm sending you a report in which you'll find a list of the most important errors in the website's code. Once these are corrected, your website will be re-indexed on Google, and in a short time, it will achieve much higher positions in the search engine. LINK

If you want your website to reach its full potential, review this report and adjust your website according to the recommendations included. The above report is completely free and non-binding. However, if you're interested in having our experts help you eliminate all errors, fully optimize your website, and submit it to Google for re-indexing, all you need to do is fill out a short application form. We have a special promotion for you till the end of the day to optimize your website for one-time fee: $135 (regular price: $245). Your discount link: LINK

Ignore and delete these Wix form submissions, there are NOT errors in your website's code, these are generic emails blasted out to every Wix website they can find to try to con people out of money unnecessarily. Do NOT click on the links in these submissions, as they could be phishing for your information.

Below is another example of a spam phishing email from a fraudster, you can tell this one is fraud as it's from a phishy email: wixmalwaresafeguard.org @ gmail.com

Message Details:

Name: Wix Live Support

Message: Dear Website Owner, Our security monitoring team has detected active malware threats on your website, which violate Wix’s Security Policy and may place both your visitors and your site’s integrity at significant risk. Important Information: If this issue is not resolved promptly, the following actions may be taken in accordance with Section 7.2 of the Wix Terms of Use: Temporary suspension of your website Restricted access to site management tools and customer data Potential removal from search engine indexes due to security risks Required Action: To prevent service disruption, please reply with “LIVE SUPPORT” so our security team can prioritize your case for immediate review and assistance. This may be your final notice before services are terminated. Reply with “LIVE SUPPORT” now to safeguard your site and restore compliance. Your urgent attention to this matter is appreciated. Sincerely, Wix Live Support Team

Here's a screenshot of this phishing email using a Wix contact form:

Below is another Phishing/Fraud contact form that starts out with the following sentence: During a recent scan by our internal security tool, Wix SentinelGuard™, we detected signs of suspicious activity on your website including possible redirects or unverified external scripts.

This is spam, and not from Wix! You can see it says "Wix Live Support" for the reply-to email, but the gmail address itself is totally phishy! See email screenshot below...

Here's another phishing spam Wix form submission example below, starting out with the following text: Our system confirms that the malicious code injection on your website is still active. This means your site is not only compromised but is also being flagged across global security networks as a high-risk domain.

Below is yet is another phishing scam form submission with a security issue message that starts out with the following message:

We have identified a potential security issue on your website that has triggered alerts from upstream threat monitoring systems. Specifically, your site appears to be exhibiting unauthorized redirection behavior , which may redirect users to potentially harmful or non-compliant external destinations.

These are all scammers!

Attackers often attempt to impersonate Wix or Wix Designers with fake emails and websites in order to target and deceive.  To help identify and report suspicious messages pretending to come from Wix, a phishing Wix Designer, or other legitimate sources, check out the link below:  

support.wix.com/en/article/identifying-and-reporting-phishing

It's important that you do NOT reply to these messages and NOT to click on any of the links, especially if they are asking you to login at the link they provide. Sometimes a link will take you to a page that looks like Wix's login page, but it's really a fake site collecting your login details so they can scam you and get access to your website. I have the same advice for for bank emails, or any companies that send you an email. I always will go directly to the bank or other company website to login, I never use links provided in emails to do so as scammers are clever and while some emails may look real, they are often not and by clicking on the links and logging into these seemingly real but fake websites, this is how they gain access to your accounts. Report any phishy looking emails as spam and delete the emails. You can also search Google for the text from an suspect email to see if it's been used before, which is very common.

Be safe out there!