Stay Alert: How to Protect Your Website (and Your Inbox) from Scammers

If you’ve ever received those suspicious (and extremely frustrating) messages claiming to be from “Wix Support” or "Wix Experts" — you’re not alone. In fact, we’ve had an imposter company reach out to of our own clients pretending to be us! They use official-looking logos, fake urgency, and even spoof email addresses to make it seem like they’re legitimate.

These scams aren’t just targeting Wix site owners anymore — they’re part of a much larger trend across all online businesses. From Squarespace to Shopify, scammers are exploiting publicly visible contact information and old website forms to harvest email addresses and target unsuspecting users.

Why You Should Never Type Out Your Email Address Online

One of the easiest ways for scammers to find you? By scraping your email address right off your website or social media profiles. Those little “info@yourbusiness.com” links look convenient — but they’re a goldmine for email harvesting bots. These automated tools scan millions of pages daily, collecting any visible email addresses to feed into spam and phishing campaigns.

Here’s what we recommend instead:

✅ Use a contact form on your website instead of a plain email address.

✅ If you must share your email publicly, mask it (e.g., “hello [at] asherandrose [dot] io”)

✅ Avoid adding your email in image captions, PDFs, or social bios.

This simple change can dramatically reduce the amount of scam and spam hitting your inbox but unfortunately they still find their way to your inbox/spam folder and we all have to continue to stay vigilant.

Switch to the New Wix Forms — the Old Ones Are Obsolete and don't have built in recaptcha

If your site still uses legacy Wix forms, it’s time to upgrade. Wix released new-generation form tools with stronger spam filtering, improved delivery reliability, and enhanced user permissions.

👉 You can spot the difference easily — new Wix forms include modern editor options (like flexible layouts, input validations, and anti-bot reCAPTCHA built-in).

If you’re still on the old version, you might miss important inquiries, since the old backend system is being deprecated across sites. We’ve seen several clients discover entire message threads lost because their old form wasn’t syncing properly with Wix Inbox.

So please — take a few minutes to rebuild and replace those outdated forms. Or, reach out and we can help you migrate them properly.

These Scams Target Everyone — Even Us

At Asher + Rose, we get the same phishing emails you do. They usually follow a pattern:

• Scary subject line (“Urgent: Your Wix Account Has Been Flagged”)

• Demands for immediate action (“Click here to prevent suspension”)

• Unfamiliar sender (often a Gmail address or a fake Wix domain)

We know how unsettling these can be — especially when they mention your real website name. But remember:

If it sounds urgent, emotional, or requires payment to “fix” something — it’s a scam.

Legitimate Wix messages only come from addresses ending in @wix.com or @wixanswers.com.They’ll never contact you through your site form, inbox chat, or Gmail.

Let’s Recap: Staying Safe in 2025

✅ Never click suspicious links or reply to emails demanding payment.

✅ Hide or mask your email address on your site and socials.

✅ Upgrade all Wix forms to the new version.

✅ Use two-factor authentication (2FA) on your Wix account.

✅ Report and block suspicious senders immediately.

These steps go a long way in keeping your online presence — and your peace of mind — intact.

We know how frustrating and unnerving these scams can feel, especially when they look “official.” But rest assured — your Wix website is safe. The platform is enterprise-secure, continuously monitored, and built to protect millions of users worldwide.

If you’re ever unsure about a message, forward it to us — we’re happy to confirm what’s real and what’s not.

Stay vigilant and stay connected via our newsletter or blog updates

Shannah & Sheryl

Asher + Rose Studios