Most "your domain is about to expire" emails you get are phishing, especially if they arrive from a company you don't recognize or one that isn't your actual registrar. The fastest check: log in directly at portal.flashcloud.com (never through a link in the email) and look at the domain's real expiration date and renewal status. If the portal doesn't match the urgency in the email, the email is fake.
This scam is old and it works because domain expiration data is public. Anyone can look up when your domain expires and send you a notice that looks official right before that date.
The pattern these scams follow
Fake renewal notices share a few tells almost every time:
- A company you didn't register with. The email claims to be your registrar, but the name doesn't match who you actually pay. Scammers pull expiration dates from public WHOIS-adjacent data and mail every domain owner they can find, regardless of who actually holds the registration.
- Inflated urgency. "FINAL NOTICE," countdown timers, red banners, warnings that your website and email will go down within 24 hours.
- A price that doesn't match what you'd normally pay. A number noticeably different from your usual renewal cost is worth double-checking before you pay it.
- A link that doesn't go to your registrar. Hover over the button before clicking. If the destination domain isn't the company you registered through, stop there.
- A request to "transfer" as part of renewing. Some versions are actually unauthorized transfer attempts disguised as renewal notices. Paying the invoice authorizes moving your domain to a different registrar, sometimes at a worse price and often against your interest. If you get one of these, do not enter any transfer authorization code or click a transfer link.
What a real Flashcloud renewal notice looks like
Legitimate renewal reminders come from Flashcloud only if your domain is actually registered through us. They:
- Reference the exact domain name and its actual expiration date, which you can independently confirm by logging into
portal.flashcloud.comand opening the domain's page. - Link to your own portal account, not a third-party payment page.
- Don't demand immediate action within hours.
- Never ask you to paste in a transfer authorization code to "complete" a renewal. A transfer code (the
Reveal transfer codecontrol on the domain's page) is only ever needed when you're intentionally moving a domain to a new registrar.
If a domain is on Auto-renew, you generally don't need to do anything at all: it renews on schedule and there's no reason for a "your domain will expire" email to be urgent in the first place. Check the toggle on the domain's page in the portal to confirm auto-renew is on before assuming a notice is legitimate.
How to verify before you pay anything
- Don't click the link in the email. Open a new tab and type
portal.flashcloud.comyourself, or use a bookmark you saved previously. - Log in and find the domain in your account. Check its actual expiration date and
Auto-renewstatus. - Check
Registrar lockon the domain's page. If it's on, the domain can't be moved to another registrar even if someone tries, which blocks the most damaging version of this scam outright. - Compare the price in the email against what renewal actually costs in your account. A number that's noticeably higher than what you've paid before is a strong signal.
If everything checks out in the portal and the date and price match, the notice is legitimate and you can renew directly from your account rather than through the email link. If the domain isn't due for renewal soon, or you don't recognize the sender as your registrar at all, delete the email and move on.
If you're not sure who your registrar even is
People sometimes get these emails and aren't sure whether the domain is with Flashcloud, a previous host, or wherever it was originally bought. If that's you, log into the portal and check the Domains section; if it's listed there with an expiration date and lock/renewal controls, it's registered through us. Related reading on keeping a domain secure once you've confirmed it's yours: domain locks explained covers registrar lock and the various transfer locks in detail, and if you're ever moving a domain to us intentionally, that's the legitimate case where a transfer code and a short waiting period actually apply.
When to contact support
If you already clicked a link and entered payment or account details on a page that wasn't portal.flashcloud.com, or you're not sure whether a transfer was authorized, open a ticket from Support → New ticket in the portal. It goes to a real person, not a bot, who can help verify your domain's status. The sooner a suspicious transfer attempt is caught, the easier it is to stop.