HELP FILE

Phishing Attempts! How to recognize email scams

    Be aware that malicious third parties posing as GoTo or join.me have been known to send suspicious emails to GoTo and join.me users and to members of the general public.

    Examples

    A typical scam involves an email that mimics the design and style of official GoTo or join.me communications.

    Here are some examples of real scams:

    • A recent known example (February 2015) mimics a GoTo invoice (link to blog post in English only)
    • Another known example (April 2014) has the subject "Your digital certificate has expired!"
    • One known example was modeled after our notification email regarding account lock-out due to a certain number of failed login attempts.
    • Another known example mentions a bogus software update and includes a false link to an alleged software patch. GoTo, including join.me, will never contact you with a software update attached to an email.

    What should you do?

    • As a general rule, never click any links in a suspicious email!
    • Always check if links in the emails are valid. Here's how:
      • Hover your mouse over a link and pause until you see the link's destination, shown in an infotip (Outlook) or at the bottom of your browser (Gmail, Hotmail, etc.).


    • If a link does not point to a site that you know is an official GoTo service or domain, please contact us immediately.
    • Even if a link seems to point to a GoTo site, DO NOT CLICK if you are at all suspicious!
    • Please contact our support team. We may ask you to forward the entire email so we can track down the perpetrators.
    • If you inadvertently click a link, we suggest contacting your anti-virus service for guidance.

    Sample official Pro, join.me, and LastPass "from" email addresses:

    • @e.join.me
    • @t.join.me
    • @e.logmein.com
    • @t.logmein.com
    • @e.lastpass.com
    • @t.lastpass.com
    • @ar.logmein.com

    Sample official domains:

    • .logmein.com - GoTo's main site
    • .logmeinRescue.com - Powers the Rescue service
    • .logmeinRescue-enterprise.com - Powers account-specific Rescue features (should only be allowlisted by enterprise accounts)
    • .accounts.logme.in - Site allowing login to GoTo services
    • .hamachi.cc - Powers the Hamachi service
    • .logmein123.com - Site used to connect to a technician
    • .123Rescue.com - Site used to connect to a Rescue technician
    • .join.me - GoTo's screen sharing service
    • .lastpass.com - A password management service