Scam Warning

Scam warning: fake emails using my name

Last updated 4 November 2026. I will update this page if new sender addresses appear.

If you have an email from "Chris Allen" sent from a Gmail address, it is not from me. I only email from an @achris.co.uk address. If you are in any doubt, call me on 07980 700 547 or forward the email to support@achris.co.uk.

What is happening

Since early October 2026, someone has been setting up Gmail accounts in my name. They copy my real email signature, the photo from my LinkedIn profile, my logo, and my Google reviews link. Then they email my clients, and other small businesses whose addresses are listed on their websites. Often these are info@ or reception@ inboxes.

They also use email tracking tools, such as Streak and mail-merge services, so they can see who opens their messages.

Sender addresses so far

These are the addresses I know about. None of them are mine.

  • chris.chris.co.uk@gmail.com (the $550 renewal bill, 3 October)
  • chrisallenwebdesign@gmail.com
  • allen.achris.co.uk@gmail.com
  • chrisallens.website@gmail.com (website "review" and follow-up, 9 and 15 October)
  • chris.achriswebdesign@gmail.com (an October 25 "deadline" for renewals and fixes, 20 October)
  • chris.achris.co@gmail.com (domain and plugin "renewal", 27 October, with a follow-up on 30 October). Its fake signature gives hello.americaswebdesign@gmail.com as the contact address. That is not mine either.

Free Gmail accounts are easy to create, so more will probably follow. The address is less important than the pattern: any Gmail address using my name is fake.

The emails I have seen

  • "Website License and Configuration Update" (3 October). A fake bill asking for $550.
  • "Urgent: Immediate WordPress Core Maintenance and Server-Level Updates Required" (13 October). It claims WordPress 6.9.x security patches and PHP upgrades must be done by October 18th, and offers a "scope of work".
  • "Important WordPress Update – Please Confirm" (13 October). It says "Since I'm currently managing your website..." and asks you to say if you would like them to go ahead.
  • "Portfolio Accuracy, Enquiry Journey & Website Improvements" (9 October, with a follow-up on 15 October). It looks like a friendly website review, with details taken from your own site, and offers a "priority plan" with a one-time cost. It is not from me.
  • "Important Website Renewals & Updates" (20 October). It says domain renewal, plugin renewals, "application setup" and issues from a "website audit" must be dealt with before an October 25 deadline, and asks you to reply "Yes, please proceed". Your website is not about to expire. It is not from me.
  • "Website Domain and Performance Update" (27 October, with a follow-up on 30 October). It says your domain registration and plugins are due for renewal by October 25th, which had already passed, and asks you to reply "Proceed". It is not from me.

The wording changes, but the idea is the same. A deadline, a technical-sounding problem, and a request to reply or pay.

Examples of the emails

This is the full text of the emails, so you can compare one you have received. I have removed my clients' names and anything that would identify them. Each one ended with a copy of my email signature, which I have left out. If you see this wording from anyone, it is the same scam.

"Website License and Configuration Update"

From chris.chris.co.uk@gmail.com, 3 October 2026

Hi there,

I hope you're doing well.

I'm reaching out regarding your website's license and current configuration. A review has identified updates that should be completed to maintain compatibility, proper functionality, and ongoing support.

The work includes reviewing the setup, updating the required components, addressing compatibility issues, and testing the website after completion.

Leaving these items unresolved could lead to outdated components, compatibility problems, or certain features not working as expected.

The one-time cost for the required work is $550.

If you're comfortable proceeding, please confirm and I'll arrange the next steps.

"Portfolio Accuracy, Enquiry Journey & Website Improvements"

From chrisallens.website@gmail.com, 9 October 2026

Hello [your business] Team,

I hope you're well.

I've recently reviewed the [your business] website and identified a few opportunities to improve how your [services, taken from your website] are presented to prospective clients.

Given the reputation you've established through [praise for your work, taken from your website], it's important that the website communicates the same attention to detail as your finished work.

The key areas I'd recommend addressing are:

Portfolio presentation: Several impressive projects are supported by relatively brief descriptions. Expanding selected case studies with clearer information would help prospective clients appreciate your expertise.

Project-content accuracy: [a real detail taken from your own website]

Enquiry experience: Review your contact and enquiry forms so clients can submit details easily and the relevant enquiries reach your team.

Website platform maintenance: Confirm the current CMS, theme and form software versions within the website dashboard, apply supported updates where needed, and retest form submissions, email notifications and mobile navigation.

Search visibility: Refine the connections between your services, completed projects and [your area] so search engines and AI-assisted search platforms can more accurately identify your expertise.

I would begin with the portfolio content and enquiry process, as these are particularly important when prospective clients are assessing your work before requesting a quotation.

If useful, I'd be happy to send over a concise priority plan covering the recommended improvements, the platform-update work involved and the associated one-time cost.

Please also feel welcome to mention anything else you'd like reviewed or improved on the website.

"Urgent: Immediate WordPress Core Maintenance and Server-Level Updates Required"

From chrisallenwebdesign@gmail.com, 13 October 2026

Hello,

Following a recent platform and security review, it has been determined that your website requires immediate core maintenance and server-level updates to remain secure, stable, and compliant with current WordPress standards.

Critical WordPress Core Updates

The WordPress 6.9.x security patch series (6.9.2 → 6.9.3 → 6.9.4) must be applied without delay. These updates address significant security vulnerabilities, including cross-site scripting (XSS), server-side request forgery (SSRF), and authorization or privilege escalation risks.

PHP Version Compliance Requirement

Please note that PHP versions 7.2 and 7.3 are no longer supported. The minimum required PHP version is 7.4, with PHP 8.3 or higher strongly recommended to ensure optimal performance, enhanced security, and full compatibility with current and future WordPress core updates, plugins, and themes.

Urgent Action Required

Failure to complete these updates by October 18th may result in increased security exposure, performance degradation, compatibility issues, and potential service disruptions.

Given the security implications, we strongly recommend that these updates be addressed as a matter of priority to help ensure the continued security, stability, and reliability of your website.

If you would like me to proceed, I can provide a concise scope of work and implementation timeline for your review and approval.

"Important WordPress Update – Please Confirm"

From allen.achris.co.uk@gmail.com, 13 October 2026

Hi there,

I hope you're doing well.

I wanted to follow up with an important update. We've now received further guidance regarding the latest website platform requirements, and we've been advised to make sure the necessary updates and technical checks are properly completed.

We're currently seeing a number of websites experiencing downtime, errors and compatibility issues as these changes continue, so I don't want to leave your website unattended while these updates are being rolled out.

Since I'm currently managing your website, I'd like to get the necessary work taken care of properly and make sure everything is secure, stable and up to date.

Please let me know if you'd like me to go ahead and take care of the updates, and I'll get everything moving.

"Important Website Renewals & Updates"

From chris.achriswebdesign@gmail.com, 20 October 2026

Hello,

I hope you're doing well.

I'm reaching out to bring an important update regarding your website to your attention. We have received a notification indicating that several items associated with your website require attention before the upcoming deadline of October 25.

These items include domain renewal, plugin renewals and updates, required application setup, and outstanding technical issues identified during the website audit.

Addressing these items before the deadline can help keep your website active, properly configured, secure, and functioning as expected while reducing the risk of potential service interruptions. If left unresolved, expired domain registration or inactive plugins could affect important website features, including contact forms, checkout functionality, and other essential services.

I can assist with handling the necessary renewals, application setup, plugin updates, technical corrections, and a final website review to ensure everything is working properly.

If you'd like me to take care of these updates before the deadline, simply reply "Yes, please proceed," and I'll get started on the necessary steps.

Thank you, and I look forward to hearing from you.

"Website Domain and Performance Update"

From chris.achris.co@gmail.com, 27 October 2026

Hi,

I hope you're doing well.

I wanted to bring a quick website renewal matter to your attention. We received a notice that the domain registration and some of the plugins supporting your website are approaching their renewal date. Based on the current timeline, these items should be addressed by October 25th to help avoid any potential service interruptions.

If the renewal is not completed by the deadline, the domain or certain plugins may become inactive, which could affect website functionality, compatibility, contact forms, checkout, or other essential features.

I can take care of the renewal, update the necessary plugins, and check the website afterward to make sure everything is functioning properly.

If you'd like me to handle this, simply reply "Proceed", and I'll take care of it before the October 25th deadline.

The "review" email followed up on 15 October with a shorter reminder. I don't have a copy of that one.

What they want

  • Upfront payment for work that does not exist.
  • Logins for WordPress, hosting or your domain. With these they can take over your site or infect it.
  • Remote access to your computer, through remote-control software.
  • A list of people who open their emails. That list can be used later for fake "our bank details have changed" invoices.

How I actually work

  • I only email from an @achris.co.uk address, never Gmail.
  • I never send a surprise bill, or an urgent upgrade demand for work we have not agreed.
  • My invoices only come through FreeAgent.
  • My bank details never change by email.
  • I never ask you to email me a password or login.

If an email does not fit that list, treat it as fake and check with me first.

If you got one of these emails

  1. Do not reply, click any link, or pay anything.
  2. Report it as phishing. In Outlook or Microsoft 365, use "Report phishing". In Gmail, use "Report phishing" from the three-dot menu.
  3. Forward it to report@phishing.gov.uk, the National Cyber Security Centre's reporting address.
  4. Let me know. Call 07980 700 547 or forward it to support@achris.co.uk.

Help get these accounts shut down

You don't have to do any of this. Deleting the email is enough to keep you safe. But if you have a few minutes, reporting it helps protect you and other businesses from being caught out.

These scammers target small businesses that are busy and trust the people they work with. Each report makes it more likely that the fake account is closed before it reaches someone who replies, pays or hands over a login. I report every one I see, and the more reports an account gets, the faster it is shut down.

  1. Google. Fill in the Gmail abuse report form. Enter the Gmail address that sent the email, then paste in the full email headers and the text of the email. Answer "No" to "Is the email impersonating Google?". You don't need a Google account. Use one form for each Gmail address.
  2. National Cyber Security Centre. Forward the email to report@phishing.gov.uk. Forwarding it as an attachment is best, because that keeps the headers.
  3. Anti-Phishing Working Group. Forward the email to reportphishing@apwg.org. They share reports with email providers and security companies.
  4. Streak. The emails I have seen use Streak, a tool that tells the sender when you open them. Forward the email to support@streak.com and ask them to ban the sender. Streak's support team has been very responsive and helpful. They have banned two of these accounts so far, the first within half an hour of my report.

How to get the full email headers

The headers show where an email really came from. Google needs them to trace the account.

  • Gmail: open the email, click the three dots, then "Show original". Click "Copy to clipboard".
  • Outlook (desktop): open the email, then File, Properties. The headers are in "Internet headers".
  • Outlook on the web and Microsoft 365: open the email, click the three dots, then View, "View message source".
  • Apple Mail: open the email, then View, Message, "All Headers" (or "Raw Source" to see everything).
  • iPhone or Android: phone mail apps usually cannot show headers. Forward the email to a computer, or just use "Report phishing" in the app.

Google has a guide to finding headers in other email programs.

If you replied, paid or sent a login

  1. Call me straight away on 07980 700 547.
  2. Change the password for anything you shared, and for any other account that uses the same password.
  3. Call your bank if you paid or shared payment details.
  4. Report it to Action Fraud at actionfraud.police.uk or on 0300 123 2040.

For other web designers and small businesses being impersonated

You cannot stop people creating free Gmail accounts. Google removes them one at a time, after you report them, and new ones appear. These steps help:

  • Warn your clients with a plain email that has no links in it.
  • Say "we only email from @yourdomain" on your website, in your footer, in your email signature and on your invoices.
  • Report each fake account to Google using the Gmail abuse form, and include the full email headers.
  • Report the tracking tools the scammers use to the companies that run them.
  • Forward samples to reportphishing@apwg.org and report@phishing.gov.uk.
  • Ask recipients to use "Report phishing" rather than just deleting the email. It teaches mail filters the wording.
  • Make sure your own domain has SPF, DKIM and DMARC set up, so nobody can forge your real address.

I am not the only one. Another agency, Sumy Designs, has written up the same scheme: their impersonation scam warning and how they suggest protecting yourself.

You can also find my real contact details on the contact page.