Protect your store's accounts and payment information by verifying unexpected emails through a known contact method.
This guide applies to all Abicart users, regardless of subscription. An email can be forged even if it shows a familiar name, a logo, or a sender address that looks real. An email from a third-party provider is not automatically an email from Abicart.
1. Stop before you click or reply
Be especially vigilant if the email is unexpected, demands quick payment, offers services you haven't requested, or asks you to open a link or attachment and provide passwords, codes, or payment information. A name like “Abicart Support” combined with a private Gmail address is a warning sign.
Check the full sender address and the link's actual destination, not just the display name or link text. This is a verification aid, not proof of authenticity: both email addresses and websites can be impersonated.
2. Verify through a contact method of your choice
Do not click links or open attachments in the suspicious email. Do not reply with sensitive information.
Open the Abicart website or your usual saved admin address yourself.
Contact Abicart Support through the contact method shown there, or write a new email to hello@abicart.se.
Describe the sender, subject, and time. Follow support's instructions if they need the original email or email headers. Do not send passwords, codes, or full card details.
If the email concerns, for example, a payment provider or another service you use, verify it with that specific provider through their known contact method. A security message from a third party should not be classified as either genuine or fake just because it doesn't have Abicart as the sender.
3. Handle an unexpected password reset
A reset request you didn't make is not in itself proof that someone has logged in or changed your password. Do not use the link in the email if you are unsure. Open your usual admin address yourself and contact support through a known channel if the request recurs or if anything on the account seems to have changed.
If you need to reset your password yourself, start a new reset from the usual login page. Do not give the reset code or link to anyone else.
4. If you have already provided information or paid
Password: change it via the service's real address and also change it on other services where you have used the same password. If your email account may be affected, it needs to be secured as well.
Card or bank details or a payment: contact your bank immediately through its official contact method.
Store access or changes: contact Abicart Support and provide your store ID and what happened. Do not send new secret information in the case.
Suspected fraud: save the email and other evidence and file a police report if necessary.
Mark the message as phishing or spam in your email client after you have secured the necessary evidence.
Quick start
Stop and do not open any unknown links or attachments.
Open the real service yourself.
Verify with the correct provider through a known contact method.
Act immediately if you have already provided information or paid.
Subscription
The advice applies to Go, Plus, Pro, and other Abicart accounts. The authenticity of an individual email must be verified separately; a sender domain or a subscription is not proof of security.
