What is phishing?
Phishing is when scammers send emails that look like they're from a trusted company, like Updox, to steal your username, password, or other sensitive information.
Phishing emails often use:
Real company logos and branding
Professional formatting
Urgent messages pushing you to act right away
What does a phishing email pretending to be Updox look like?
In one recent example, a fake email:
Used official Updox branding and logos
Looked professional
Asked the recipient to review updated Terms & Conditions
Warned that account access could be interrupted
Had a button labeled Review & Accept Terms
The email looked real, but the button went to a website that wasn't owned by Updox.
Which websites are really Updox?
Updox only owns and operates these two domains:
Domain | What it's for |
updox.com | Main Updox website |
myupdox.com | Updox login site |
Important: If a link takes you to any other domain, even one that looks similar, don't enter your login information or any other details.
How do I spot a phishing email?
Check the link before selecting it. Hover your mouse over a link or button to see where it really goes. Be suspicious of links that:
Use a domain you don't recognize
End in something unexpected, like .org or .net
Have misspellings or extra words that mimic Updox
Watch for urgent language. Scammers want you to act before you think. Watch for phrases like:
"Account suspension pending"
"Immediate action required"
"Verify your account now"
"Your access will be terminated"
Check the sender. The sender's name can look real even when the email address isn't. Check:
The sender's full email address
The domain it came from
Whether you were expecting the email
Never enter your login on a site you don't trust. If the website address isn't updox.com or myupdox.com:
Don't enter your username or password.
Close the browser window.
Report the email to your IT or security team.
An email asks me to update my account. What should I do?
If an email asks you to update account information, reset your password, accept new terms, or verify your identity, don't use the link in the email. Log in the safe way instead:
Open a new browser window.
Go to https://www.updox.com/.
Select Login, then select Updox.
Choose your EHR, or select Other / I don't use an EHR.
Log in with your username and password.
What should I do if I get a suspicious email?
Don't select any links.
Don't open or download any attachments.
Take a screenshot if you can.
Report the email to your IT or security team.
Delete the email after you've reported it.
What if I already selected the link or entered my password?
Change your password right away. Use a strong password you don't use anywhere else.
Tell your IT or security team.
Watch your account for anything unusual.
Turn on multi-factor authentication (MFA) if it's available for your account.
Password requirements
Requirement | Details |
Length | At least 10 characters (16 or more recommended) |
Uppercase letter | At least 1 |
Lowercase letter | At least 1 |
Number or special character | At least 1 |
What's the most important thing to remember?
A professional-looking email isn't proof that it's real. Before you select a link, check where it goes. For anything related to Updox, only trust updox.com and myupdox.com. If a link goes anywhere else, treat it as suspicious and report it.
Who can help me reset my password or set up MFA?
Chat with us, or email support@updox.com.