Fake Mailchimp / ConvertKit / Klaviyo email marketing account suspended phishing — fraudulent email impersonating Mailchimp, ConvertKit, Klaviyo, or Constant Contact claiming the recipient's account has been suspended for spam complaints or a policy violation, their sending has been paused, or their payment failed — directing them to sign in, appeal the suspension, or verify their account to restore email marketing access — a credential-harvesting attack targeting businesses whose revenue depends on email marketing; Mailchimp has 14M+ active users; a sending suspension means immediate loss of campaigns, cart abandonment emails, and customer communications

Phishing emails impersonating Mailchimp, ConvertKit, Klaviyo, Constant Contact, or ActiveCampaign claiming the recipient's account has been suspended for a high spam complaint rate or policy violation, their sending has been paused, or their plan payment has failed — directing them to sign in, appeal the suspension, or verify their account. Key facts: (1) Mailchimp has 14M+ active users; Klaviyo is the dominant platform for e-commerce email marketing with major Shopify/BigCommerce integrations; for DTC (direct-to-consumer) e-commerce brands, a Mailchimp or Klaviyo sending suspension means immediate loss of promotional campaigns, cart abandonment flows, welcome series, and post-purchase emails — each of which directly drives revenue; a mid-campaign suspension for a major promotional event (Black Friday, product launch) can cost thousands to tens of thousands of dollars in lost sales; (2) The "suspended for spam complaints" variant is unusually believable because legitimate email marketing platforms DO suspend accounts with high complaint rates — this is a real, routine platform event that email marketers are constantly aware of and anxious about; it is also a serious accusation that creates anxiety and urgency to resolve immediately before the suspension affects deliverability reputation; (3) Credential compromise of a Mailchimp or Klaviyo account is high-value for multiple reasons: the attacker gains access to the entire subscriber list (which is often the business's most valuable asset — thousands of opted-in customers), can send phishing or scam emails to all subscribers using the brand's established relationship, can change the payout/billing account, and can export all subscriber data for sale; (4) Many small business owners use the same password for Mailchimp and their e-commerce platform (Shopify, WooCommerce) — credential stuffing after a Mailchimp phish can cascade to full e-commerce takeover. Warning signs: sender domain not mailchimp.com, convertkit.com, or klaviyo.com; no reference to specific campaign names, audience list, or complaint rate; link to non-official login page; generic "suspended for policy violation" without specific violation details.