How to Recognize Phishing Emails and Spoof Websites
Protecting your business account is essential for safeguarding your company’s information, finances, and reputation.
Cybercriminals often use phishing emails and spoof websites to impersonate trusted organizations and trick users into sharing sensitive information. Learning how to recognize these threats can help keep your Kijiji account secure.
What is phishing?
Phishing is a type of fraud in which scammers attempt to steal sensitive information by pretending to represent a legitimate company.
Phishing attempts often arrive through:
-
Email
-
Text messages
-
Social media messages
-
Fake login pages
-
Fraudulent websites
The goal is typically to obtain:
-
Passwords
-
Credit card information
-
Banking details
-
Security codes
-
Account credentials
What is spoofing?
Spoofing occurs when a fraudster creates a fake email, website, or online identity designed to look like a legitimate business.
Spoof websites may copy:
-
Company logos
-
Brand colours
-
Login pages
-
Domain names
-
Employee names and signatures
These sites are designed to convince users that they are interacting with a trusted organization.
Common Signs of a Phishing Attempt
1. Urgent or Threatening Messages
Scammers often try to create panic or pressure you into acting quickly.
Examples include:
-
“Your account will be suspended immediately.”
-
“Your payment has failed. Update your information now.”
-
“You’ve won a prize. Claim it today.”
Remember: Legitimate companies rarely require immediate action through unsolicited emails.
2. Requests for Sensitive Information
Kijiji will never ask you to provide sensitive account information through unsolicited emails or text messages.
Never share:
-
Passwords
-
Verification codes
-
Credit card details
-
Banking information
-
Login credentials
Password reset emails are only sent when you request a password reset through the official sign-in process.
3. Suspicious Email Addresses
Always review the sender’s email address carefully.
Official business communications may originate from:
-
@kijiji.cakiji@marketing.kijiji.cai.ca@kijijileads.com
-
@@re.limpsys.caarketing.kijiji.ca
-
@kijijileads.com
-
@re.limpsys.ca
-
@retail.limpsys.ca
Be cautious of addresses that imitate legitimate domains, such as:
-
kijiji.support@gmail.com -
security@kijiji-help.com -
support@kijiji-security.net
Fraudsters often use lookalike domains to appear trustworthy.
4. Poor Grammar, Formatting, or Branding
Many phishing messages contain:
-
Spelling mistakes
-
Unusual wording
-
Generic greetings
-
Broken formatting
-
Inconsistent branding
While some scams are sophisticated, poor-quality content remains a common warning sign.
5. Unexpected Attachments or Links
Do not open attachments or click links unless you are confident they came from a trusted source.
Unexpected files may contain malware or lead to fraudulent websites.
How to Identify a Spoof Website
Before entering your login information, verify the website address displayed in your browser.
Official Kijiji websites include:
Check for HTTPS
A secure website should include:
-
“https://” at the beginning of the address
-
A lock icon displayed by your browser
Although HTTPS alone does not guarantee a website is legitimate, its absence is a significant warning sign.
Watch for Lookalike URLs
Fraudulent websites often use addresses that resemble legitimate domains.
Examples of suspicious URLs include:
-
kijiji.ca.fake-site.com -
kijiji-login.net -
kijiji.secure-account.info
Always verify the full domain name before entering credentials.
Verify Links Before Clicking
If you receive an email containing a link:
-
Hover your cursor over the link without clicking.
-
Review the destination URL displayed by your browser or email application.
-
Confirm that the destination matches the official website.
If anything appears unusual, do not click the link.
Instead, manually enter the website address into your browser.
Best Practices for Securing Your Business Account
Use Strong Passwords
Create unique passwords that:
-
Are difficult to guess
-
Are not reused across multiple services
-
Include a combination of letters, numbers, and symbols
Enable Two-Factor Authentication (2FA)
When available, enable two-factor authentication to add an additional layer of protection.
Monitor Account Activity
Regularly review your account for:
-
Unexpected login activity
-
Unauthorized account changes
-
Unusual ad posting behaviour
-
Unknown users accessing the account
Educate Your Team
If multiple employees have access to your business account, ensure they understand:
-
How phishing attacks work
-
How to identify suspicious messages
-
How to report potential security incidents
What Should I Do If I Suspect Fraud?
If you believe you have received a phishing email or visited a spoof website:
-
Do not click any links.
-
Do not download attachments.
-
Do not enter login credentials.
-
Forward the suspicious email to report@kijiji.ca.
-
Change your password immediately using a trusted device.
-
Review your account activity for unauthorized changes.
Taking action quickly can help reduce the risk of unauthorized access.
Frequently Asked Questions
Will Kijiji ever ask me for my password?
No. Kijiji will never ask for your password through email, text message, or unsolicited communications.
How can I verify that a website is legitimate?
Check the full website address, confirm the domain matches an official Kijiji domain, and verify that the site uses HTTPS.
What should I do if I accidentally clicked a suspicious link?
Immediately change your password, review your account activity, and contact support if you believe your account may have been compromised.
What if I’m not sure whether an email is legitimate?
Do not click links or open attachments. Instead, navigate directly to the official Kijiji website and sign in from there.
Stay Safe Online
Cybercriminals continually develop new techniques to impersonate trusted organizations. Staying alert, verifying links, and protecting your credentials are the most effective ways to keep your account secure.
By working together, we can help maintain a safer marketplace for everyone.