Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell: two critical PHP flaws affect most WordPress hosting. See if your site is affectedFlagged by our vulnerability database: PHP2Shell, two critical PHP flaws. DetailsFlagged: PHP2Shell. Check your site
HuttenlocherTechnologies

Security · 4 min read · Updated October 25, 2026

Domain renewal letters and fake invoices: don’t pay these

Short answer: Official-looking notices to “renew” your domain often come from a company that isn’t your registrar. Pay one and you may move your domain to them at a much higher price, or pay for nothing at all. Here’s how to tell the real ones apart.

What they look like

They work because domain registration data is public and the notices arrive around renewal time. Paying some of them authorizes a transfer of your domain to the company that sent it.

  • A letter or email titled something like “Domain Name Expiration Notice” with a price for one to ten years, from a company you’ve never heard of.
  • “Search engine submission” or “SEO listing” invoices that look like a bill but say in small print they’re an offer.
  • Emails from a “registry” in another country saying someone is trying to register your business name in their country, and you have to act now.
  • Calls saying your Google listing will be removed unless you pay to verify it.

How to tell a real renewal

  • It comes from the registrar where your domain actually is. Check with a WHOIS or registration lookup; our domain check shows the registrar.
  • It links to your account at that registrar, which you can reach by typing its address yourself.
  • If your domain is on auto-renew, you usually only get a receipt.

Protect the domain

  • Turn on auto-renew and keep a working card on file.
  • Turn on the registrar lock (client transfer prohibited) and two-step sign-in.
  • Use a contact email at the registrar that someone reads, ideally not one tied to a single employee.
  • Throw the look-alike letters away.

Written by Nikita Huttenlocher, founder and lead engineer at Huttenlocher Technologies, a web design and software company in Myrtle Beach, South Carolina.

Questions

I already paid one. What now?

Check where your domain is registered now. If it moved, contact the original registrar right away. If you just paid for a listing nobody needs, dispute the charge with your card company.

Can you watch our domain for us?

Yes. Domain protection watches expiry, renewal, locks and DNS changes, with an alert the same day something moves. It’s $29 a month per domain.

Start a project

Tell us what you're building.

A website, a booking system, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll build it writes back
02A planning call, then a written plan with the price and the date
03A preview on your phone while it's being built
04Launch night handled: redirects, email, Google
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?

No newsletter, no sales sequence. Just a reply.