At UpMarket, the security of your account and your guests’ information is a priority. In this guide, you’ll find recommendations to protect your access, identify potential fraud attempts and know what to do if you receive a suspicious message.
What is phishing?
Phishing is a type of fraud in which someone pretends to be a trusted company or service to obtain your login details, personal information or banking details. It usually arrives by email, SMS, WhatsApp or phone call, and includes links to fake pages that imitate real ones.
How to recognise a phishing attempt
The website address isn’t exactly the official one, even if it looks very similar (for example, an extra letter, a hyphen or a different ending such as “.com” instead of “.cloud”).
You reached the login page through a search engine, a sponsored result or an ad, rather than from your bookmarks.
The page or message asks for your password, verification codes or banking details in an unusual way.
The message creates a sense of urgency (“your account will be blocked”, “action required within 24 hours”).
The sender doesn’t match the official domain, or the message contains spelling mistakes, an unusual tone or unexpected attachments.
Best practices to protect your account
Always log in from the official link. Only access UpMarket from https://my.upmarket.cloud/login and save it to your browser bookmarks. Avoid logging in from links received by email or message.
Check the address before logging in. Make sure the URL in your browser is exactly https://my.upmarket.cloud/login and that the secure connection padlock is displayed.
Don’t share your password. Never provide it by email, chat or phone. The UpMarket team will never ask you for your password or your verification codes.
Use strong, unique passwords. Create a long password with letters, numbers and symbols, and don’t reuse it for other services. A password manager can help.
Protect your verification codes. At UpMarket, two-step verification is enabled on all accounts to add an extra layer of protection. Never share the codes you receive with anyone.
Create a user for each team member. Avoid sharing logins and give each user only the permissions they need. 👉 Learn more
What to do if you suspect a phishing attempt
Don’t click on any links or download any attachments.
Don’t reply to the message or provide any information.
If you’ve entered your login details on a suspicious page, change your passwords immediately.
If the message appears to come from another platform you use (for example, your PMS or a booking channel), contact that provider through its official channels.
If you have any questions, please contact our Support team via the UpMarket chat.