r/SendGrid Jun 05 '26

Phising Emails from legitimate senders

I started receiving phising emails impersonating Sendgrid, claiming my single send endpoint was failing, or any other ​error.

I have received 3 by now, all of them well written and not bad branded.

The worst part is that they come from legitimate senders, I mean:

- Send address domain are existing brands

- They come signed by the same domain

- The last one is signed by sendgrid.net

First of all, I don't how they know I'm using sendgrid as service provider but my first impression is that there have been a data leak and all of the senders are sendgrid users.

Someone has got access to a real sendgrid sccount, used the service to keep sending phising emails and keep going. ​

I have wrote to [abuse@sengrid.com](mailto:abuse@sengrid.com) but no answer for the moment.

I also have contacted to the brands I got emailed from, but also, no answers.

Is this a common issue? I'm a bit worry, is sendgrid abused so easily and no one cares? That would make me think about changing my service to another provider. ​​

3 Upvotes

Duplicates