Skip to main content
Question

Inquiry about potential Phishing Box Email

  • November 18, 2025
  • 2 replies
  • 11 views

Hi,

For one of our employees, he recieved an email stating that his payment method for Box was declined and it came from a [removed by moderator] email address. However, it still seemed like a phishing email, so we looked into it further and it was sent from an AWS IP Address instead of a Box Domain IP address.

So I wanted to see if it was possible to talk to somebody from the Box Security Team to see if they could verify this email.

2 replies

Jey Bueno Box
  • Community Manager
  • 934 replies
  • November 18, 2025

👋 Hi ​@lhughes, welcome to the Box Community! I completely understand your concern about a potential phishing email.

 

Billing-related automated emails (e.g., payment confirmations or declined payment notices) are sent to the registered Bill To contact. If your employee received one, our Billing Team can verify whether the email truly came from Box.


To investigate further, please email our Billing Team at billing@box.com. Kindly include:

  • The enterprise or user ID linked to the Box account
  • The email address of the person who received the message
  • A screenshot of the email itself

This will help us confirm whether the email matches the Bill To contact and also check the account status.


In the meantime, for security purposes, please avoid clicking any links in the suspected phishing email.

 

If you have any other concerns, don’t hesitate to reach out. We’re here to help!


  • Author
  • New Participant
  • 1 reply
  • November 18, 2025

Hi, Thank you

I’ll email them