Scam Warning: Fake Emails Impersonating GOBO Creative
I want to make clients aware of a phishing scam that is becoming increasingly sophisticated, with emails being sent to businesses pretending to be from me or GOBO Creative.
Several clients have received emails appearing to come from me, offering website updates, improvements or technical advice. These emails are not genuine, and I have not sent them.
What makes this particularly concerning is just how convincing the messages have become.
These aren't your typical scam emails
In the past, phishing emails were often easy to spot, with poor spelling, generic messages and suspicious links.
The latest emails are very different. They are highly personalised, professionally written and refer to specific content, services and features on my clients' existing websites.
Some even make seemingly helpful suggestions about improving the website, making the message sound like a genuine follow-up from someone who knows the business.
AI is being used to analyse publicly available website content and generate these convincing messages. Whatever the method, they are becoming increasingly difficult to distinguish from genuine correspondence.
How to spot a fake email from GOBO Creative
The biggest giveaway so far has been the sender's email address.
The fraudulent messages I've seen have come from Gmail accounts rather than my official business email address.
If you receive an email claiming to be from me, please remember:
Check the sender's address. Genuine GOBO Creative emails come from my business domain, @gobocreative.co.uk, not a Gmail account.
Be cautious of unexpected offers. Particularly emails offering website audits, improvements, security checks or urgent updates.
Don't click suspicious links or make payments. Especially if the request is unexpected.
Check with me directly. If you're unsure, contact me using my usual email address or through my CONTACT PAGE.
Remember that email addresses can also be spoofed, so even a familiar-looking sender address isn't an absolute guarantee.
What should you do if you receive one?
Don't panic — Your website is fine. Nothing is wrong, and no action is required.
Please don't respond to the email or follow any instructions it contains. Instead, forward it to me so I can see what's being circulated, and report it as phishing through your email provider.
If you've already clicked a link or shared sensitive information, please get in touch so we can discuss the appropriate next steps.
Unfortunately, this isn't an isolated problem. Other web designers and their clients are experiencing similar impersonation attempts.
It's frustrating that scammers are exploiting established business relationships and the trust that comes with them.
I'll always be happy to discuss improvements to your website, but if you receive an unexpected message claiming to be from me, please take a moment to check.
When in doubt, contact me directly. I'd much rather you double-check than fall victim to a convincing scam.