Scam Alert: Fraudulent Emails Impersonating DP Web Design

We are aware of an ongoing email scam in which individuals are impersonating Danny Poole and DP Web Design to contact our existing clients.

We have received reports of these fraudulent emails since at least 8 June 2026, with new incidents continuing through October.

What Is Happening?

Scammers are sending emails that appear to come from DP Web Design, using our business name, Danny Poole's identity, photographs, branding, website address and other publicly available information to make their messages look genuine.

Similar impersonation scams have also been reported by web designers and digital agencies across Australia and overseas. These incidents appear to follow a similar pattern of targeting businesses that already have an established relationship with a web developer.

Scammers can potentially identify these relationships through publicly available information, including website portfolios, project references, website credits, business websites and online contact details.

There is no indication that DP Web Design's website, servers or email accounts have been compromised. The information being used appears to have been gathered from publicly available sources.

What Are the Scammers Trying to Achieve?

The emails typically offer website reviews, hosting renewals, maintenance, security updates, performance improvements or other technical services.

Some messages create urgency by suggesting that a website has problems requiring immediate attention. Others take a more conversational approach, offering recommendations or a review without initially requesting payment.

The intention is to establish trust by pretending to be the web developer the client already knows, before potentially requesting:

• Payment for fictitious website maintenance, hosting or renewal services.
• Approval of unexpected invoices or online payment requests.
• Website login credentials or administrative access.
• Other sensitive business or account information.

Some clients have already engaged in extended email conversations with these impersonators. In one recent incident, a client was directed to an online payment page but fortunately contacted us to verify the request before making payment.

These messages can be convincing. They may refer to genuine website details, previous work or services that sound entirely reasonable. A professional-looking email does not necessarily mean it is legitimate.

How to Protect Yourself

We recommend taking the following precautions whenever you receive an unexpected email concerning your website:

• Check the sender's full email address. Genuine DP Web Design correspondence comes from our @dpwebdesign.com.au domain, not Gmail or other unrelated addresses. Remember that sender names and email addresses can also be imitated.
• Verify unexpected requests independently. Contact us using our official website or contact details you already have. Do not rely on contact information supplied only in a suspicious email.
• Question unexpected invoices or payment links. Be cautious of unfamiliar payment platforms, changed payment details or requests that do not match your normal arrangements with us.
• Never share passwords or website access details in response to an unsolicited email.
• Do not click suspicious links or open unexpected attachments. Even if the message includes our genuine logo, website or photograph, it may still be fraudulent.
• Check with us before approving work. This applies to website maintenance, hosting, domain renewals, WordPress updates, SEO, security, accessibility or any other unexpected services.

If your business has multiple staff members handling accounts or invoices, please make sure they are also aware of these scams. A fraudulent invoice may be forwarded internally and mistaken for an approved payment.

What If You Have Already Responded or Paid?

If you have replied to a suspicious email, received an unexpected payment request or shared information, please contact us as soon as possible.

If you have already made a payment, contact your bank or card provider immediately and explain that the payment may be fraudulent. If you have shared login credentials, change the affected passwords promptly and let us know so we can help assess any potential website access risks.

You can also report suspicious activity to Scamwatch or submit a cybercrime report through the Australian Government's cyber.gov.au website.

We Are Continuing to Monitor and Report These Scams

We are continuing to collect evidence and report fraudulent email accounts and payment requests to the relevant service providers.

Unfortunately, scammers can create new email addresses and change their approach quickly. Artificial intelligence and automated tools can also make these messages more personalised and convincing.

If you receive a suspicious message claiming to be from us, please send it through so we can investigate and help protect other clients.

The most effective protection is simple: always independently verify unexpected requests for website work, access or payment.

Article updated: 26 October 2026