{"success":true,"data":{"id":"fake-chargebee-recurly-subscription-billing-platform-phish","label":"Fake Chargebee / Recurly / Paddle subscription billing platform payment failed, subscription billing suspended, customer subscriptions cannot renew, or recurring billing and invoice generation disabled phishing","description":"Phishing emails impersonating Chargebee, Recurly, or Paddle claiming the subscription billing platform payment has failed, the billing platform is suspended, customer subscriptions cannot be renewed, recurring billing is disabled, or invoice generation has stopped — directing them to update billing or restore access through a credential-harvesting portal. A uniquely meta attack category: attackers impersonate the subscription management tool that the target company uses to collect revenue from its own customers. Key facts: (1) Chargebee serves 6,500+ SaaS companies ($249-599+/month Growth/Scale/Enterprise) as the dominant subscription billing and revenue management platform — Chargebee is embedded in the target company's billing stack, managing subscription upgrades, downgrades, renewals, dunning, and revenue recognition; a Chargebee subscription lapse means the target company's own customers cannot renew their subscriptions, new subscriptions cannot be created, and all recurring revenue collection stops; this is existential business urgency — the company's primary revenue engine stops; (2) The 'customer subscriptions cannot be renewed' hook is the most catastrophic billing failure possible: unlike most SaaS billing suspensions where internal team tools go down, a subscription billing platform suspension means the target company stops collecting money from its own customers; every subscription renewal that fails during the suspension is revenue lost; enterprise SaaS companies with monthly recurring revenue of $100K-1M+ face immediate financial damage; (3) Recurly serves 2,000+ companies ($249+/month) with particular strength in subscription businesses with complex billing scenarios (usage-based, tiered, freemium-to-paid) — Recurly's dunning management automatically retries failed customer payments; when Recurly itself is suspended, all dunning workflows stop and the failed payment recovery automation that the company depends on halts; (4) Paddle serves 4,000+ software companies as a merchant of record that handles VAT, sales tax, and payment processing globally — Paddle suspension means the entire payment infrastructure is offline and customers in all markets cannot complete purchases; (5) Chargebee, Recurly, and Paddle credentials expose the complete recurring revenue architecture of the target company: every customer subscription record with pricing and billing dates, total MRR and ARR, churn rates, dunning configuration, coupon codes, and the complete customer financial relationship — comprehensive competitive intelligence. Warning signs: sender not chargebee.com/recurly.com/paddle.com; genuine Chargebee billing at app.chargebee.com/billing; Recurly billing at app.recurly.com/settings/billing.","tier":"danger","category":"phishing","isThin":false}}