Reporting Suspicious Emails
Draft — last updated July 18, 2026
Legal
Reporting Suspicious Emails
DRAFT for review. This page is authored ahead of counsel review and still contains placeholders — shown in brackets — that Uniqcli will finalize before it is published. It describes current practice in plain English and is not final legal text.
Criminals sometimes impersonate technology vendors to steal money or credentials — especially from accounts-payable teams. This page tells you how genuine Uniqcli email behaves, how to verify a message independently, and how to report one that looks wrong. Uniqcli's website and services are directed to customers in the United States.
How genuine Uniqcli email behaves
It comes from our domain. Uniqcli email is sent from addresses ending in @getuniqcli.com — a message from a lookalike domain (extra letters, a different ending) is not from us. [Pre-publication check: confirm the configured sender addresses — SMTP_FROM and every outreach from-address option, by env-var name only — are all on @getuniqcli.com.]
It matches your account. Transactional messages — order confirmations, receipts, invoices, quote and support updates — correspond to real activity you can see by signing in to your portal account at getuniqcli.com/portal.
Marketing email is optional. Our occasional marketing messages include a working unsubscribe link that goes to getuniqcli.com/unsubscribe.
What we will never ask for by email
Payment by gift card, cryptocurrency, or wire to a new account.
Your password, sign-in codes, full card number, or bank credentials. Sign-in and payment happen on our site, in your portal session — never by emailing details back to us. In the one narrow case where we arrange payment by emailed invoice or payment link (a separately-charged expedited-shipping upgrade — see the Expedited Shipping Charge Authorization), it is for an amount you already authorized during checkout. Before paying anything that arrives by email, verify the order and the charge in your portal account — by typing getuniqcli.com yourself.
A change to our bank or payment details announced by email. If a message tells your AP team that Uniqcli's remittance or ACH details have changed, treat it as fraud until verified as described below.
Verify independently — don't trust the email
- Sign in to your portal account by typing getuniqcli.com yourself, not by clicking a link in the message, and check whether the order, invoice, or request actually exists there.
- Or contact your Uniqcli representative using a phone number or email address you already have — not the contact details in the suspicious message.
How to report
Don't click links, open attachments, or reply.
Forward the message — as an attachment if your mail client supports it, so headers are preserved — to [SECURITY MAILBOX — dee decision] [mailbox pending].
If you already entered credentials or sent a payment, contact your bank and your own IT or security team immediately, then report it to us.
You can also report phishing to the FTC at reportfraud.ftc.gov or the FBI's IC3 at ic3.gov.
What we do with reports
We review reported messages and confirm whether they genuinely came from Uniqcli. Where a message impersonates us, we report it to the relevant email or hosting provider to get it taken down, and where we can identify affected customers, we warn them. [Response-time commitment and takedown workflow: process — dee decision.]
How to contact us
Uniqcli ([ENTITY — dee to confirm registered name(s)])
[ADDRESS — dee to confirm]
Suspicious email reports: [SECURITY MAILBOX — dee decision] [mailbox pending]
General legal: [email protected] [mailbox pending]
Not sure a message is really from us?
Talk to a Uniqcli engineer, or send a bill of materials for a TAA-verified quote — no payment up front.