How to recognize fake GMX emails

If you receive an unexpected email claiming to be from GMX, it could be a phishing attempt by online scammers. This page will help you distinguish a fake email from a legitimate GMX email.

Online scammers can send emails that look like real GMX customer service or information emails at first glance. Since the sender name (a) can be freely chosen, scammers can use the same names that GMX does. The sender address (b) often imitates real GMX addresses, but upon closer inspection, you may notice small differences, such as swapped letters (e.g., "Serivce" instead of "Service"). To make the email appear legitimate, scammers may insert GMX logos as images. The email text will usually urge you to take an action regarding your GMX account, such as clicking a link. However, the links (c) in these emails lead to fake websites. You should never click on them.

Examples of fake GMX emails:

You are notified of a GMX invoice and asked to pay an outstanding amount.
You are warned that your GMX Account will soon be deactivated and that you must click a link to prevent the deactivation.
You are accused of sending virus-infected emails and are asked to click a link and run a virus scan in order to prevent your account from being deactivated.
You are informed that your GMX Account has been placed on a blocklist and that you need to verify your account by clicking a link.

How can I check the authenticity of an email?

In addition to general phishing prevention tips, there are several ways to check whether a GMX email is legitimate.

Check the sender’s email address

Verify which email address the sender is using. If you are logged into your GMX Account in a web browser, you can view the sender’s email address by clicking on the displayed sender name in the "From:" line of the opened email. If you are using the GMX Mail app on Android, tap Show details below the sender’s name. In the GMX Mail App for iOS, tap directly on the displayed sender’s name.

GMX uses specific email addresses for general information, security notifications, account deactivation warnings, and invoices. If you receive an email from one of the following addresses, it is genuine:

Customer support:
support@corp.gmx.com
General information, security notifications related to your account:
service@corp.gmx.com

Info:

Scammers may use a sender address that looks very similar to a real GMX address or even display an official GMX sender name. Therefore, always check the email address itself, not just the sender name. Carefully compare the sender address of the suspicious email with the official addresses listed above.

For invoice emails: Compare with your personal data in GMX MyAccount

You can verify the details in an invoice email by comparing them with the billing information saved in the GMX GMX MyAccount settings. Go to Invoices in GMX GMX MyAccount and check your list of GMX invoices. If there is no invoice matching the details in the email, it is likely a fake.

Optional: Have the email verified by our Postmaster service

If you have POP3/IMAP enabled and access your GMX emails through a third-party email program, you can have suspicious GMX emails checked for authenticity. In your email program, save the email in EML or MSG format. You can then upload this file to the Postmaster pages for verification.

What should I do if the email Is a phishing attempt?

Report it as phishing

If you suspect that an email is a phishing attempt, you can report it to us using the contact form on the Postmaster pages. If the authenticity check is negative, you have the option to report the email by clicking the 'Report Phishing' button.

Mark it as spam

Move the phishing email to the Spam folder in your GMX inbox by marking it as spam.