Phishing awareness notice

We’re aware of phishing emails circulating that impersonate Tim Boylen and other Boylen staff. Some of these are well put together – the name, the signature, and the tone all look right. That’s exactly why the domain matters more than how convincing an email looks.

Every legitimate email from us comes from @boylen.com.au. Nothing from Gmail, Outlook, a “[email protected]” style lookalike, or any other domain is us, regardless of who it claims to be from.

What to check

• The sender’s actual email address, not just the display name. A display name can say “Tim Boylen” while the address behind it is a Gmail account.
• Requests to pay an invoice to a new or updated bank account. We will never change payment details over email alone.
• Requests for login details to your website, hosting, or ad accounts.
• Urgency or pressure, especially anything asking you to act “today” or keep a request quiet.
• Unexpected attachments or links, particularly invoices or “signed” documents you weren’t expecting.

If something looks off

Don’t click, don’t reply, and don’t action the request. Verify it directly: call us, or email a Boylen contact using an address you’ve used before, not one from the suspicious email. Then forward it to us so we can flag it and warn other clients if needed.

When in doubt, a quick call to check is always the right move.

Report it on your end too

Forwarding the email to us helps us warn other clients, but it won’t take the phishing account down. For that, report it directly to the email provider it was sent from (Gmail, Outlook, and others all have a “report phishing” option in the message menu). That flags the account to the provider and speeds up getting it shut down.