Protect Your Business From This Dropbox Scam

Dropbox is a useful service for transferring files between contacts. But it can also be used to scam you and steal your data, so it’s important to be careful when opening files that purport to be from the service.

The first rule is simple: If you don’t know the person who is sending you the Dropbox link, don’t open it. Ignore files and shared folder invitations from strangers, and delete the message. If you aren’t sure whether you know the sender or not, contact them directly through another platform, including by phone.

If you know the sender, but you still feel something is fishy about the request, you can use these tips to identify real Dropbox links from fake ones.

Dropbox only sends links from official Dropbox domains, like dropbox.com or dropboxmail.com. Some email apps let you check the full email address of the sender by clicking on their name, hovering over the name, or clicking a three-dot menu to expand the name into the full email address. You can find a full list of Dropbox domains here.

If you think you received Dropbox spam and not an official link, Dropbox encourages you to forward the email to abuse@dropbox.com.