07/07/2026
⚠️ **A quick message to my clients, followers and fellow business owners.**
As many of you are already aware, recently, I've become aware of someone impersonating me and my business, SOSWEB, by sending fake emails to some of my clients. They've copied my logo, used my business name and address, and created Gmail addresses that look similar to my own in an attempt to make the emails appear genuine.
The emails claim that WordPress websites aren't compliant, need urgent updates, or will stop working unless the recipient replies immediately. In some cases, they've even quoted a fee to "fix" problems that don't exist.
Thankfully, several clients recognised that something wasn't right and contacted me before responding. I'm incredibly grateful they did.
I want to reassure everyone that neither my email account nor my systems have been hacked. From what I can see, the scammers have simply gathered publicly available information from websites and other online sources, using the same tools and techniques that many companies use to collect information from the internet. Unfortunately, this makes it possible for them to identify businesses and create very convincing impersonation emails.
While this has been frustrating, it's also a reminder that these scams are becoming increasingly sophisticated. We often hear warnings about fake HMRC emails, parcel delivery scams and bank fraud, but criminals are increasingly targeting small businesses too. They rely on creating urgency and hoping someone reacts before stopping to question it.
Here are a few simple ways to protect yourself from **any** suspicious email:
✔️ Check the sender's email address carefully, not just the display name.
✔️ Be wary of messages demanding urgent action or immediate payment.
✔️ Never click links or open attachments unless you're expecting them.
✔️ If you're unsure, contact the company using a trusted phone number or email address you already have.
✔️ It's always better to ask than assume.
For anyone who works with me, my genuine email address is [email protected] If you ever receive an email about your website, hosting or support that doesn't look right, please contact me directly before taking any action.
Many larger organisations actively test their staff with fake phishing emails because they know how convincing these scams can be. The most important thing isn't technical knowledge—it's taking a moment to pause, verify and think before responding.
If this post helps just one person avoid being caught out, it's worth sharing. Please feel free to pass it on—awareness is one of the best defences we have.
Thank you, as always, for your trust and support.
— Kirsty
SOSWEB
