Scammers sometimes pretend to be from a hosting company to take over customers' accounts, domains and websites. Here's our promise to you, and how to protect yourself.

Our promise

No one from Motherhost will ever ask you for:

  • a one-time code (OTP) sent to you by email or SMS
  • your Motherhost account password
  • a two-factor authentication code from your authenticator app
  • any hosting, control panel (Plesk), FTP, database, email or server password
  • your domain transfer code (EPP/Auth code) or domain login details
  • your card details, UPI PIN or bank OTP

This applies to everyone at Motherhost: our support team, sales team, billing team and anyone else.

We won't call you to ask for any of these. We also won't ask you to install remote-access apps such as AnyDesk or TeamViewer so that we can "fix" your account.

Why we never need them

  • One-time codes are only for you. We send an OTP to prove that you are the person logging in or making a change. Anyone who has the code can act as you. A real Motherhost staff member never needs it.
  • Our team has its own secure access. To help with your hosting, domains or email, our staff use their own access. They never need your password.
  • Verifying who you are: if you contact us, we may ask for your Customer ID or Support PIN (shown under My Profile → Security) to confirm that you're the account holder. These are never a password or an OTP. Share them only when you started the conversation, and never with someone who contacted you first.

How to spot a fake Motherhost call or message

Be suspicious if someone:

  • calls, texts or messages you on WhatsApp saying they're from Motherhost, then asks for a code or password
  • says your account, domain or website will be suspended, deleted or hacked unless you act right now
  • asks you to read out or forward a code you just received
  • sends a link to a login page that isn't my.motherhost.com or www.motherhost.com
  • asks you to pay an invoice by a method other than paying it in your Motherhost account

Real invoices and renewals always appear in your account under My Invoices. If you're unsure about a message, don't click its links. Log in at my.motherhost.com yourself and check there.

Received a code you didn't ask for?

If you get a Motherhost login or password-reset code that you didn't request, someone may be trying to get into your account.

  1. Don't share the code with anyone.
  2. Log in at my.motherhost.com and change your password.
  3. Check your recent logins for anything you don't recognize.
  4. Turn on two-factor authentication if you haven't already.

Already shared a code or password?

Act quickly:

  1. Change your Motherhost account password right away.
  2. Change any hosting, email, FTP, database or server passwords you shared.
  3. Turn on two-factor authentication.
  4. Email us at support@motherhost.com from your registered email address. Tell us what happened, and we'll help you check and secure your account.

Report a suspicious call or message

Please forward suspicious emails, or tell us about calls and messages, at support@motherhost.com. Include the phone number, sender address or a screenshot if you have one. It helps us warn other customers.

Need help now? Email support@motherhost.com.