There is a Scammer Impersonating Me Via Email

​Dear Clients, 
A scammer (or perhaps their ai scam bot) is STILL emailing my clients from “info.greenwebdesignteam@gmail.com” using email subjects like “Important: Website update required for latest version.” 

The scammer is signing the emails with my name, using a stolen picture of me. Today’s iteration on 5/22/2026 has them pretending I need your permission to install the WordPress 7 updates that I already installed and tested on your websites yesterday. Please forward these scam emails to me for analysis before you report them as phishing/spam, and then block them. 

I have reported this scammer to IC3 (the FBI’s cybercrime unit) 3 times. I have reported it multiple times to Google’s Abuse department. I also spoke with the Menominee Sheriff’s Department in April and again today. There’s not really anything they can do, but they are at least aware.

With criminals using AI to combine stolen data from multiple data breaches along with publicly available information, they are trickier than ever! Many bad actors today are state sponsored hackers from North Korea, China, Russia, Iran, Pakistan, and other countries. These emails can seem very realistic. 

• Pay close attention to the email address sending the message before replying.
• Never give anyone your password for any reason! Not a marketing company, not another web designer, not a graphic designer. No one legitimate will ever need your administrator password. If you want to give someone access, I can create a new account just for them, with lesser permissions, that doesn’t give them the ability to delete your website or hack it. 
• I will never ask you for your password. I can reset your password if I really need to. Only a scammer would need your password.  
• If I manage your WordPress website, I will NEVER ask for permission to proceed with WordPress or Plugin updates. I will just do it. It’s literally my job and my duty to you. I won’t ever ask permission to do my job, nor will I tell you that I did it. I will just silently do it every single day as usual.  
• If you think your password is compromised, call me immediately so I can lock down your website and protect the server. 
• Never click on a link in an unsolicited email. These links often contain dangerous malware.
• Type the official website address into your browser yourself to ensure you reach the real site. 
• Never give anyone administrator access to your website or email! They can use that access to try to hack the entire server.
• Never give any personal or banking data out via email or by phone. 
• If you’re not sure if something is real, always assume it isn’t real. It’s better to be safe than to be sorry!

Now more than ever, we must all stay vigilant against scammers.
Thanks for your time, and have a great week!