About the author
Table of contents
Last updated: August 19, 2026. This scam is active.
Someone is sending emails pretending to be me
If you receive an email that appears to be from me or from Five Point Web Solutions asking you to approve urgent website updates, renew a domain, or make a payment, it is not from me.
One address being used is [email protected]. There may be others.
Do not reply. Do not click links or open attachments. Do not send money. Mark the message as spam or phishing, then delete it. If you are unsure about anything, call me at (208) 919-4131.
How to verify anything that claims to come from me
These three rules are permanent. They will still be true long after this particular scam is gone, and they work no matter how convincing a message looks.
1. Check the domain, not the name
Every legitimate email I send comes from an address ending in @fivepointweb.com. I will never contact you from Gmail, Yahoo, Outlook, iCloud, or any other free email service.
Look at the actual address, not the sender’s display name. Anyone can set a display name to read “Five Point Web Solutions” — and that is exactly what is happening here.
2. Confirm invoices in your portal, not in your inbox
I do send invoices by email, and they do contain a link to pay. That is normal and you should expect it. But the email is never what makes an invoice real — the portal is.
So if an invoice ever gives you pause, you don’t have to judge whether the email looks right. Skip the link. Open your browser, type portal.fivepointweb.com yourself, and log in. If the invoice is there, it’s mine and you can pay it from inside the portal. If it isn’t there, the email wasn’t from me. That check takes about thirty seconds and it works no matter how convincing a message looks.
Two things are always true of a real invoice from me. It is for work we have already discussed — I do not open with a surprise fee and a deadline. And I will never ask you to pay by wire transfer, gift card, Zelle, Venmo, or cryptocurrency.
3. When in doubt, call me
If anything claiming to be from me feels off — an unexpected deadline, a payment request, a contract you weren’t expecting — call me at (208) 919-4131 before you act on it. I would much rather answer a quick “is this really you?” call than help someone recover afterward.
Details of the current scam
This one is well made, so please don’t judge it by appearance. The sender has copied my email signature almost exactly: my name and title, my photograph, the Five Point star logo, my website address, my social media links, even a business address. Visually, it looks like my email.
The messages follow this pattern:
- Claims a “notice from WordPress” says your site needs urgent updates, a domain renewal, or an “app setup”
- Sets a short deadline and warns that your site could be flagged or suspended if you miss it
- Asks you to simply reply “Yes, proceed” — no details, no invoice, nothing that feels like a commitment
- Only then quotes a fee, and offers a “discount” as a courtesy to a valued client
- Mentions a billing coordinator who will send a contract from a different email address
- Shows a screenshot of a “Contract sent” confirmation to make the exchange feel official
- Asks you to send a screenshot of your payment confirmation once you have paid
None of this is real. WordPress does not send notices of this kind. I have no billing coordinator, and no one else sends contracts or invoices on my behalf.
To be clear about one thing: nothing of mine has been breached. No account, mailbox, or website of mine has been compromised, and no client data has been exposed. This person is using an ordinary free email account and a copied signature block.
If you received one of these
- Don’t reply, click, or pay.
- Mark it as spam or phishing in your email program, then delete it.
- Let me know, so I can track how far this has spread.
- If you have a minute, report it to Google. I have already filed a report, and reports from multiple recipients carry more weight than one from me alone: Google’s abuse reporting form.
If you already responded
Replying by itself does not put you at risk, but please tell me so I know how far this has gone.
- If you sent a payment: contact your bank or card issuer right away and ask about a reversal. The sooner you call, the better the odds.
- If you entered a password anywhere: change it now, and change it anywhere else you have used the same one.
- If you shared card details: call the number on the back of the card and report it.
Then call me and I will help you sort out anything on the website side. Nobody is in trouble for being taken in by this. It is a careful, patient fake, and more than one person got several messages into the conversation before anything felt wrong.
Questions
Call or text me at (208) 919-4131, or email [email protected]. If you’d like to confirm that this page itself is legitimate, you reached it at fivepointweb.com — and you’re always welcome to call and ask.
Wendell Harness
Five Point Web Solutions
