# Spot a fake login email

> Learn the warning signs of a fake mailbox-verification email and what to do if you already entered your password.
>
> Source: https://docs.officeniaga.com/phishing-emails/

An email that asks you to click a link and enter your password to "verify" your mailbox or avoid suspension is fake. A genuine mailbox-full notice never needs your password. To check your space, log in yourself and see [Mailbox full](/mailbox-full/).

## Warning signs

- An urgent threat, such as a deadline of a few hours or "mailbox suspended".
- A link that does not go to `mail.officeniaga.com`. On a computer, rest your mouse on the link without clicking to see the real address. On a phone, press and hold the link.
- An official-looking sender name with a strange address behind it. A fake email can even appear to come from your own company.
- A generic greeting like "Dear User" instead of your name.
- Odd spelling, grammar or formatting.

## Where to actually log in

The only place to log in is `mail.officeniaga.com`. Type it into your browser yourself or use a saved bookmark. See [Log in to webmail](/log-in/).

## If you already entered your password

1. [Change your password](/change-password/) right away, then turn on [two-step authentication](/two-step-authentication/).
2. Tell your domain admin what happened.
3. Check **Settings** for a **Forwarding Address** you did not set up ([Forward email and autoresponder](/forwarding-autoresponder/)) and check your [content filtering](/content-filtering/) rules. Delete anything unfamiliar.
4. Contact support on WhatsApp at [+60 16-916 3324](https://wa.me/60169163324) if you need help.

> **Caution**
> Never type your password into a page you reached by clicking a link in an email, even if the page looks exactly like the Office Niaga login. To get fewer of these emails, sign up on websites with a [disposable address](/disposable-address/) instead of your main one.

## Common issues

### The email says my mailbox will be suspended today unless I click a link. Is this real?

Almost certainly not. Check the warning signs on this page, and if you are unsure, contact support on WhatsApp at +60 16-916 3324 (https://wa.me/60169163324) instead of clicking the link.

### The link went to a page that looks exactly like the Office Niaga login. How do I tell it is fake?

Check the address bar. It must show exactly mail.officeniaga.com followed by a / or nothing at all. Anything else, such as mail.officeniaga.com.login-verify.xyz or officeniaga-mail.com, is fake.

### I already entered my password on one of these pages. What now?

Change your password immediately and tell your domain admin. See If you already entered your password on this page.