Back to Security & Privacy
Security & Privacy

Recognizing Phishing

Learn to identify and avoid phishing attempts.

4 min readUpdated: 1/25/2026

Recognizing Phishing

Phishing is when scammers try to trick you into revealing sensitive information.

What Is Phishing?

Scammers impersonate ClapPay (or other companies) to steal:

  • Login credentials
  • Payment information
  • Personal details
  • Money

They use emails, texts, calls, and fake websites.

Red Flags to Watch For

Suspicious Emails

🚩 Sender address: Not from @clappay.com

🚩 Urgency: "Act now or lose access!"

🚩 Grammar: Spelling and grammar errors

🚩 Generic greeting: "Dear Customer" instead of your name

🚩 Suspicious links: Hover to see real URL

🚩 Attachments: Unexpected files

Fake Websites

🚩 URL: Not clappay.com (watch for clappay-secure.com, c1appay.com)

🚩 No HTTPS: Missing padlock icon

🚩 Design: Slightly off from real site

🚩 Errors: Broken images or links

Phone Calls

🚩 Asking for password: We never ask for your password

🚩 Pressure: Rushing you to act

🚩 Threats: "Your account will be closed"

🚩 Payment requests: Send money via gift cards, crypto

What ClapPay Will Never Do

We will NEVER:

  • Ask for your password via email, text, or phone
  • Ask you to send money to "verify" your account
  • Threaten to close your account immediately
  • Ask for one-time passcodes (2FA codes)
  • Contact you from personal email addresses
  • Ask you to download software to "fix" issues

How to Verify Communications

Emails

  1. Check sender is @clappay.com
  2. Log in directly (don't click email links)
  3. Check the Notifications tab for the same message

Phone Calls

  1. Hang up
  2. Call us directly: Use number from our website or app
  3. Never trust callback numbers given by caller

What to Do If You're Targeted

If You Received a Phishing Attempt

  1. Don't click any links
  2. Don't download attachments
  3. Report to us: security@clappay.com
  4. Delete the message

If You Fell for a Phishing Attempt

  1. Change your password immediately
  2. Enable 2FA (if not already)
  3. Contact us: In-app chat or call
  4. Review account: Check for unauthorized changes
  5. Monitor transactions: Report anything suspicious

Related Articles:

phishing
scams
fraud
email

Was this article helpful?

Still need help?

Our support team is available 24/7 to assist you.