{"success":true,"data":{"id":"fake-mailchimp-email-marketing-account-suspended-phish","label":"Fake Mailchimp / ConvertKit / Klaviyo email marketing account suspended phishing — fraudulent email impersonating Mailchimp, ConvertKit, Klaviyo, or Constant Contact claiming the recipient's account has been suspended for spam complaints or a policy violation, their sending has been paused, or their payment failed — directing them to sign in, appeal the suspension, or verify their account to restore email marketing access — a credential-harvesting attack targeting businesses whose revenue depends on email marketing; Mailchimp has 14M+ active users; a sending suspension means immediate loss of campaigns, cart abandonment emails, and customer communications","description":"Phishing emails impersonating Mailchimp, ConvertKit, Klaviyo, Constant Contact, or ActiveCampaign claiming the recipient's account has been suspended for a high spam complaint rate or policy violation, their sending has been paused, or their plan payment has failed — directing them to sign in, appeal the suspension, or verify their account. Key facts: (1) Mailchimp has 14M+ active users; Klaviyo is the dominant platform for e-commerce email marketing with major Shopify/BigCommerce integrations; for DTC (direct-to-consumer) e-commerce brands, a Mailchimp or Klaviyo sending suspension means immediate loss of promotional campaigns, cart abandonment flows, welcome series, and post-purchase emails — each of which directly drives revenue; a mid-campaign suspension for a major promotional event (Black Friday, product launch) can cost thousands to tens of thousands of dollars in lost sales; (2) The \"suspended for spam complaints\" variant is unusually believable because legitimate email marketing platforms DO suspend accounts with high complaint rates — this is a real, routine platform event that email marketers are constantly aware of and anxious about; it is also a serious accusation that creates anxiety and urgency to resolve immediately before the suspension affects deliverability reputation; (3) Credential compromise of a Mailchimp or Klaviyo account is high-value for multiple reasons: the attacker gains access to the entire subscriber list (which is often the business's most valuable asset — thousands of opted-in customers), can send phishing or scam emails to all subscribers using the brand's established relationship, can change the payout/billing account, and can export all subscriber data for sale; (4) Many small business owners use the same password for Mailchimp and their e-commerce platform (Shopify, WooCommerce) — credential stuffing after a Mailchimp phish can cascade to full e-commerce takeover. Warning signs: sender domain not mailchimp.com, convertkit.com, or klaviyo.com; no reference to specific campaign names, audience list, or complaint rate; link to non-official login page; generic \"suspended for policy violation\" without specific violation details.","tier":"danger","category":"phishing","isThin":false}}