I got a suspicious email from Dropbox asking me to upload files

[KevinFischer]

I know this isn't really a "security and permissions" question, but I just got a suspicious email from "Dropbox" that is concerning.

Is this a scam?  Please note that the HTML has been altered by the dropbox message app, and the message actuall looked like a Dropbox email.

Thanks!

	Pippa [removed] is requesting files for "Renewal and Billing Update – Your Account Was Charged." You can upload files securely to Dropbox so that Pippa can see them, even if you don't have an account.  Pippa wrote: Client, Thank you for placing your order. We would like to inform you that your subscription has been automatically renewed today, Aug 29, 2024. Payment Method: Auto-Debit Note: If this transaction was not done by you, contact us immediately to stop the transaction and receive an immediate refund, you have a 24-hour grace period from now to do so. For assistance, please contact us at: [removed]

[personal info removed per the Dropbox Community Guidelines]

[Hannah]

Hey @KevinFischer, thanks for reaching out to us.

Is the email address of the sender of this email one the addresses found in this article?

Do you know the person mentioned in that email?

Keep me posted.

[KevinFischer]

The reply address was "no-reply@dropbox.com", so not much there.

The upload link in the email was

[removed]

[KevinFischer]

 

[Hannah]

Thanks, Kevin.

The upload link doesn't look like anything suspicious, nor does the email itself, to be honest; it seems to be a legit Dropbox email.

But do you know the person in the email? If not, you can either forward the email itself to abuse@dropbox.com, if it seems suspicious, or simply just ignore it.

[KevinFischer]

Thanks Hannah.  I will forward to the above indicated address. 

Kevin

[vidaguapo]

Yep, got the same style email requesting info for dropbox.  I have never paid for dropbox so I know they have no debit info.

I received 2 emails actually, one from Martin Fernandez, another from Kenneth Willis. Both want me to click on a link which I never do.

I would suspect this is a SCAM

[Walter]

Hey @vidaguapo - thanks for bringing this to our attention.

Could you please clarify if those emails are coming from an official Dropbox domain or not? 

[KevinFischer]

The reply address was no-reply@dropbox.com.  The name was Pippa [removed per Community Guidelines] on the email, and I don't know this person.  

So you can't really tell where it came from.  However, the send to address was:

[removed per Community Guidelines] which seems totally bogus.

[Nancy]

@KevinFischer, did you contact abuse@dropbox.com, like Hannah suggested above?