Skip to main content

How can we help you?

I have placed an order on Digistore24

Stay safe with Digistore24: How to protect yourself from fakes & phishing

Digistore24 is a popular platform that vendors, affiliates, and buyers use to successfully run their business or process their purchases. For this reason, unfortunately, there are repeated attempts at fraud carried out in our name.

In classic phishing, well-known and trusted brands are impersonated and messages are sent in bulk to a large number of recipients. The attackers rely on the likelihood that some of the recipients will be familiar with the brand in question, trust it, or actually have an account with it. According to one study, 44% of respondents are more likely to consider an email safe if it contains a familiar brand logo.

Prior access to the customer data of the impersonated brand is not required for this form of phishing.

Contents of this article:

For vendors & affiliates: Keeping your Digistore24 account secure

To avoid falling for scammers’ tricks, you should know how to recognize the real Digistore24 and what you need to consider to keep your Digistore24 account secure.

Password

We will never (!) ask you for your Digistore24 password. Support-relevant information about your Digistore24 account can be viewed in our own system.

What you can do

Never share your password with anyone. If someone asks you for your password, it is an attempt at fraud.

Scammers, for example, send emails in the name of Digistore24 asking for your password. See the “Email addresses” section for more information.

Website, login & registration

There are three ways to log in to Digistore24:

What you can do

  • Whenever you log in, always check that you are on https://www.digistore24.com.
  • Never enter your password on any other site. Scammers like to create fake pages that contain “Digistore24” and even look like Digistore24.

Fake links

How to recognize a genuine Digistore24 address

An official Digistore24 address is either exactly “digistore24.com” or ends with “.digistore24.com” – for example, “www.digistore24.com” or “help.digistore24.com”.

What matters is what comes directly after “digistore24.com”: a slash (“/”) – or the address ends there.

Genuine Digistore24 addresses:

  • https://www.digistore24.com/en/…
  • https://help.digistore24.com/…

Not Digistore24 addresses:

  • https://digistore24.com.example.com/… – “digistore24.com” is followed by neither a slash nor the end of the address. This address actually belongs to “example.com”.
  • https://www.fake-digistore24.com/… – the domain is “fake-digistore24.com”, not “digistore24.com”.

Important

Do not open any address that does not exactly match this pattern – no matter how genuine the email or page may look.

Example of a fake link: https://www.digistore24.com

This is what this fake link looks like in the website code:

<a href="https://www.fake-digistore24.com">https://www.digistore24.com</a>

What you can do

Pay attention to the difference between the display name and the URL – that is, what the link is called and where it actually leads.

The link shown above uses the real Digistore24 URL as the display name to deceive you.
The link points to a fake URL.

You can check a link’s actual target address before you open it. This also applies if the address is hidden behind a button: hover your mouse over the link without clicking it.

Depending on your email program or browser, the target address will then usually be shown at the bottom of the window. Check the domain as described above under “How to recognize a genuine Digistore24 address”.

Note

If necessary, you may need to enable the browser’s status bar for this if you haven’t already.  

For buyers: Protection against fraud & phishing

Scammers may also try to trick you as a buyer using fake emails or websites. Very often, the goal is to capture your payment data or pressure you into making an additional payment.

For this purpose, so-called phishing emails are frequently sent in the name of Digistore24, for example requesting payment details or asking recipients to make another payment.

Typical characteristics of phishing emails:

  • You are asked to “confirm”, “re-enter”, or “update” your payment details even though you have already paid.
  • The email threatens account suspension, late fees, or other consequences if you do not click a link immediately.
  • The sender’s email address does not follow the pattern @digistore24.com (see the “Email addresses” section).
  • The email is very generic and contains no information or incorrect information about your specific order (e.g. wrong product name, wrong price).

What you should check before clicking a link or entering payment details

  • Sender address: Does the email really come from an address that ends in @digistore24.com?
  • Order ID: Does the order number in the email match the order ID in your original Digistore24 order confirmation?
  • Price: Does the amount shown match the actual purchase price of your order?
  • Links: Hover your mouse over the links in the email and check whether the target address really leads to an official Digistore24 address. It is either exactly “digistore24.com” or ends with “.digistore24.com” (see the “Fake links” section).
  • Content: Does the email relate to an order that you actually placed with Digistore24? If you have never purchased the product mentioned, it is very likely a phishing attempt.

How to respond correctly if you suspect phishing

  • Do not click any links in the suspicious email until you are sure it is genuine.
  • Never submit credit card, bank, or any other sensitive payment details in response to an email.
  • If you are unsure whether an email is genuine, always contact Digistore24 Support before clicking anything or entering payment details.

Important

We will never ask you to send sensitive payment details (e.g. full credit card number, security code, or online banking login details) directly by email.

Official email addresses & social media channels

Email addresses

All Digistore24 email addresses end with @digistore24.com.

If you receive an email with any other ending, it is always fake, no matter how convincing the content may look.

Examples of fake email addresses:

  • ...@digistore24.support
  • ...@digistore24.help
  • ...@digistore24.hilfe

Social media channels

These are the official Digistore24 social media channels:

If you come across any other social media channel, it is always fake, no matter how credible the content may appear.