How to spot fake Rebel renewal emails

If you received an email with the subject “Urgent: Renew Your Rebel Service”, you’re not alone. Several customers shared this same message with us, and it looks convincing at first glance. It uses our name. It talks about renewals. It even pretends to be from “Rebel.com.”

But it didn’t come from us.

Your security matters, and we want to make sure you can recognize these look-alike messages with confidence. Here’s how these fake emails work and how to stay safely in control of your services.

What these fake emails look like

The recent phishing email includes wording like:

• “Urgent: renew now to avoid disruption”
• “Immediate action required”
• “Your Rebel service will expire very soon”
• A large “Renew Now” button that links to an external site
• A footer claiming to be “Rebel.com Internet Solutions Pte Ltd”
• A sender address like no-reply.1ua2gt@zapiermail.com

These details are designed to create urgency and push you toward a link that is not part of your Rebel experience.

Here are the signs something is off:

• The sender address is not ours. Any message from a domain that is not our name is a red flag.
• The company name in the footer is wrong. “Rebel.com Internet Solutions Pte Ltd” is not us.
• The tone is overly urgent. We don’t send renewal warnings that pressure you.
• The button leads to a site that isn’t ours. Phishing links often mimic real pages but are set up to collect information.

If even one detail feels unfamiliar, pause and verify before clicking anything.

How to confirm an email really came from Rebel

Real Rebel messages follow clear patterns so you always know what to trust.

Legitimate Rebel emails:

• Come from addresses ending in our name
• Link directly to our site or clearly branded pages
• Never ask you to reply with your password or payment card details
• Match the tone and clarity you expect from us

When you want to be sure:

• Open a new browser tab
• Type our address yourself
• Sign in to your account
• Check your services and renewal dates there

If the email was real, you’ll see the same information in your dashboard.

If it wasn’t, your account will show that everything is completely fine.

And if you’re still wondering, reach out from inside your account and we’ll take a look with you.

What to do if you clicked a suspicious link

If you followed the link or entered information on a page that looked similar to ours, you’re not stuck. Just take a few quick steps to secure your account.

• Change your Rebel password from your account settings
• Update the password anywhere else you used the same one
• Check your Rebel account for any unexpected activity
• Contact our support team so we can review everything with you

If you entered payment information, let your bank or card issuer know. They will guide you through the next steps.

You’re not alone in this. We’re here to help you get everything back on solid ground.

How to report suspicious emails

If you receive a message that seems suspicious:

• Avoid clicking any links or downloading attachments
• Do not reply to the sender
• Forward the message to abuse@mailgun.org
• Then feel free to delete it

If you’re a Rebel customer, you can also attach the email when contacting our team from inside your account. Every report helps us investigate and reduce these attempts for everyone.