Business Directory and Domain Renewal Scams: 8 Signs (2026)

How directory, advertising, and domain renewal scams work

The scam relies on a bill that looks like an ordinary business expense. Scamwatch says scammers request payment for directory listings, advertising, and domain name renewals that you did not order. The invoice may use official-sounding names, a registration or listing number, and a due date. Whoever handles accounts payable sees a small amount and passes it on.

The FTC describes the directory version: scammers try to get you to pay for nonexistent advertising or a listing in a “phony business directory”. They may call asking for your contact details for a “free” listing, or to “confirm” your information. Later a large bill arrives, and the scammer may use a recording or details from the earlier call to pressure you into paying. The FTC also describes phony invoices that look as if you ordered products or services, and calls asking you to “confirm” an order, “verify” an address, or accept a “free” catalog or sample, which can lead to unordered merchandise and later pressure to pay.

Domain scams add a threat of loss. The FTC gives the example of a scammer claiming to be from a tech company who says your business will lose its website address unless you pay immediately. The bait may be a notice that your domain is “about to expire”, an offer to “renew” at an inflated price, or a request to “transfer” your name to a new provider. Scamwatch points small businesses to the ICANN lookup and auDA WHOIS tools so they can see who registered a domain and when.

A related fraud is the altered invoice, where a scammer poses as a supplier you already use and changes the payee details. That is a different attack with a different defence, covered in our guide to fake invoice and business email scams. Scamwatch also warns that very low prices on everyday items such as bulk office or cleaning supplies can be a scam, where you lose your money and receive nothing.

What it looks like in practice

These are illustrative composites written for this guide to show the pattern. They are not quotes from a real victim or a real message.

The “free listing” call (illustrative)

A cheerful caller says they are updating a local trade directory and just need to confirm your address and who handles billing. Weeks later an invoice arrives for an annual listing, with a note that you “agreed by phone”. The FTC describes exactly this pattern: a request to confirm details, a later large bill, and a recording or earlier call used as pressure. You do not owe money for a service you never ordered. Do not call the number on the invoice. Ask your staff who spoke to the caller, and keep the invoice.

The domain expiry notice (illustrative)

An email, or a printed letter that resembles a bill, says your domain expires in 14 days and quotes a price several times higher than you pay. The sender is not your registrar. The pattern matches the FTC’s example of a scammer threatening that your business will lose its website address unless you pay now. Log in to your registrar account directly, check the real expiry date, and ignore the notice. Do not click links in it.

The invoice that goes through accounts (illustrative)

A small business receives a neat invoice for an “online directory renewal” of a modest amount. The owner is out, the bookkeeper sees a registration number and pays it. The FTC advises clear approval procedures so that staff check invoices closely, and that a new bill needs a matching order or approval. A one-line rule like “no PO, no payment” would have stopped it.

Eight warning signs of a false billing scam

1. A bill for something nobody remembers ordering. Scamwatch describes payment requests for directory listings, advertising, and domain renewals you did not order. If no one in the business can point to the order, do not pay.
2. A call to “confirm” your details for a free listing. The FTC says scammers ask for contact details for a “free” listing or call to “confirm” information, then follow with a large bill and may use a recording to pressure you.
3. A threat that you will lose your website address. The FTC gives an example of a caller claiming to be from a tech company who says you will lose your URL unless you pay immediately. Check the facts in your own registrar account.
4. A sender who is not your registrar or supplier. Scamwatch points to ICANN Lookup and auDA WHOIS to see who registered a domain and when. Compare the sender of any “renewal” with the company you actually registered through.
5. Payment by wire, cryptocurrency, or gift card. The FTC says not to pay anyone who demands payment by wire transfer, cryptocurrency, or gift cards. See bank transfer scams and gift card scams.
6. Goods arrive that you never ordered, followed by a bill. The FTC says if you receive merchandise you did not order, you have a legal right to keep it and use it for free. Pressure to pay or return it at your cost is a warning sign.
7. Prices that are too good to be true for supplies. Scamwatch warns that low prices on everyday items such as bulk office supplies or cleaning products can be a scam, and that you would lose your money and receive nothing.
8. Urgency, caller ID, and links in unexpected messages. The FTC says not to trust caller ID and not to click links or open attachments in unexpected messages.

How to check an invoice or renewal notice before paying

1. Find the order. Ask who in the business requested the service. If nobody did, stop. No order means no obligation.
2. Look up the company independently. The FTC advises searching a new company’s name with the word “scam” or “complaint” before doing business. Scamwatch also lists ABN Lookup for Australian businesses.
3. For a domain, log in to your registrar account by typing its address yourself and check the real expiry date and renewal price. Use ICANN Lookup (or auDA WHOIS for .com.au) to see who registered the name and when.
4. Do not call the phone number or open the link on the notice. Use contact details you already hold.
5. Route every new invoice through the same approval step, even small ones. The FTC recommends clear approval procedures for purchases and invoices and training staff to spot these tactics.
6. If the notice looks like it comes from your actual provider, contact the provider using the details on its official site and ask them to confirm it.

If you already paid or gave details

Work through these in order. Speed matters most for the first two.

1. If you paid by card, call your card issuer straight away, say the charge was for services you never ordered, and ask for a chargeback. Change any passwords you shared.
2. If you paid by bank transfer, contact your bank immediately and ask them to recall the payment. See bank transfer scams.
3. If you paid by gift card, wire, or crypto, contact the issuer or provider and ask for the funds back. The FTC’s what to do if you were scammed page lists steps by payment method.
4. If you gave login or registrar details, sign in to your registrar directly, change the password, turn on two-factor authentication, and check that the domain has not been transferred. See account takeover.
5. If someone shared your contact details on a call, brief your team, and ask the staff member to write down what was said while it is fresh.
6. Keep every invoice, email, and call note with dates and amounts for your reports.
7. Do not pay a “recovery” or “cancellation” fee. See recovery scams.

Where to report

• United States: report to the FTC at ReportFraud.ftc.gov and alert your state attorney general (contacts at NAAG.org), as the FTC advises.
• Australia: report to Scamwatch. Scamwatch also points small businesses to the free Cyber Health Check tool and IDCARE (1800 595 160).
• United Kingdom: Report Fraud (0300 123 2040), or Police Scotland on 101. Forward suspicious emails to report@phishing.gov.uk.
• Canada: the Canadian Anti-Fraud Centre, 1-888-495-8501.

More help from official sources

• FTC: Scams and Your Small Business, a guide for business
• Scamwatch: Protect your small business from scams
• Scamwatch: Buying and selling scams
• GOV.UK: Avoid and report internet scams and phishing

Scambaba is an independent educational project. Reporting and recovery options depend on where you live. How these guides are researched is on the editorial policy.

Frequently asked questions