Creative 4 All Security Alert: Email Impersonation

About This Security Incident

Official Security Notice — October 13, 2026

Creative 4 All s.a.r.l. would like to inform our clients, business partners, and website visitors about an email impersonation incident involving our company’s identity and branding.

We have received reports from existing clients about suspicious emails sent by an unauthorized individual or group falsely claiming to represent Creative 4 All.

These messages misuse the identity of one of our employees, including his photograph, alongside our company name, logo, website address, and contact information to create the appearance of legitimate business correspondence.

Important: These messages are fraudulent and were not sent, approved, or authorized by Creative 4 All.

We are publishing this notice to protect our clients, raise awareness, and provide guidance on recognizing and reporting suspicious communications.

1. Identified Fraudulent Email Address

We have identified the following email address appearing in unauthorized communications impersonating our company:

mhd.creative4all@gmail.com

This email address is not an authorized Creative 4 All communication channel.

The suspicious messages have included genuine employee information, photographs, company branding, and professional-looking signatures to appear authentic.

Please note that scammers may create additional email accounts, use different providers, imitate legitimate company domains, or falsify sender information.

Never assume that an email is genuine simply because it displays our company name, logo, employee photograph, telephone number, or website address.

2. How the Impersonation Attempt Works

In the reported incidents, the sender contacted existing Creative 4 All clients with messages discussing their websites, technical observations, and potential improvements.

These emails were professionally written and contained information relevant to the recipients’ businesses, making them appear to originate from someone familiar with their websites or previous projects.

Such communications may be intended to establish trust before introducing unauthorized services, quotations, payments, or requests for sensitive information.

Common warning signs include:

• Using a real employee’s photograph or identity without authorization.
• Copying company logos, branding, contact details, and website addresses.
• Creating convincing email signatures that resemble official business correspondence.
• Contacting existing clients and referring to actual websites or completed projects.
• Providing website audits, technical observations, or recommendations that were never requested.
• Offering website maintenance, development, security updates, or performance improvements.
• Encouraging recipients to reply, schedule meetings, request quotations, or approve additional services.
• Potentially requesting payments, account credentials, or website administration access during subsequent communications.

Accurate company information or genuine technical details do not prove that an email was sent by Creative 4 All.

3. How Scammers May Obtain Business Information

Web design and digital marketing agencies commonly publish portfolios, client references, project descriptions, and business information.

Some client websites also display publicly accessible development credits identifying the agency responsible for their design or development.

Third parties may use this information to identify business relationships and locate publicly available contact details.

Scammers can also use automated website crawlers, scraping tools, and artificial intelligence to analyze public websites and prepare personalized messages.

This information can often be collected without gaining access to private company systems.

At this time, we have no evidence that our company website, email accounts, or internal systems have been compromised in connection with the reported messages.

We continue to review the situation and will update this notice if additional verified information becomes available.

4. Common Scams and Fraudulent Requests to Watch For

Although the reported messages initially focused on website-related services, impersonation attempts may develop into phishing, financial fraud, or unauthorized account access.

We encourage clients to remain alert to the following warning signs.

Website Maintenance and Technical Support Scams

• Unexpected requests to approve website maintenance or development work.
• Claims that WordPress, plugins, themes, or PHP versions require urgent paid updates.
• Unsolicited website audits or security reports containing alarming technical claims.
• Offers to repair website errors, improve performance, or remove alleged security threats.
• Requests to purchase unfamiliar software, licenses, or maintenance packages.
• Warnings that a website will be suspended or become inaccessible unless immediate action is taken.

Domain, Hosting, and Email Scams

• Fraudulent domain renewal or expiration notices.
• Fake hosting invoices or account suspension warnings.
• Requests to access cPanel, WHM, webmail, or WordPress through unfamiliar login pages.
• Messages claiming that email accounts, SSL certificates, or hosting services require urgent verification.
• Requests to modify DNS records, transfer domain ownership, or change hosting credentials.
• Unexpected requests to confirm mailbox passwords or increase email storage capacity.

Payment and Invoice Fraud

• Invoices for services that were never requested or approved.
• Requests to transfer money to unfamiliar bank accounts.
• Claims that our company has changed its payment details.
• Requests for advance payments through personal accounts, cryptocurrency, or unfamiliar payment platforms.
• Messages pressuring recipients to make immediate payments to avoid penalties, suspension, or service interruption.

Phishing and Account Access Scams

• Fake password reset or account verification emails.
• Requests for usernames, passwords, verification codes, or recovery codes.
• Requests to create new administrator accounts on websites or hosting platforms.
• Requests to provide access to Google Ads, Google Analytics, Google Search Console, Google Business Profile, or other business accounts.
• Messages requesting access to hosting control panels, email accounts, domain registrars, or customer information.
• Requests to install remote-access applications or unfamiliar software.

Malicious Links, Attachments, and Downloads

• Emails containing suspicious links, shortened URLs, or buttons leading to unfamiliar websites.
• Attachments presented as invoices, quotations, contracts, reports, CVs, or HR documents.
• Files claiming to contain website audits, technical reports, or urgent security updates.
• Compressed files, executable programs, or documents asking users to enable macros.
• QR codes directing recipients to fake login pages or payment portals.
• Messages encouraging users to download unfamiliar browser extensions or software updates.

Messaging and Social Media Impersonation

• WhatsApp messages from unknown numbers pretending to represent our company.
• Fake social media accounts using our logo, business name, or employee photographs.
• Unexpected messages through Telegram, LinkedIn, Facebook, or other communication platforms.
• Requests to continue business discussions through unfamiliar personal accounts.
• Messages using artificial intelligence-generated content, manipulated images, or potentially deceptive audio and video to imitate legitimate representatives.

These examples describe possible scam techniques and do not mean that every method listed has been used in the current incident.

5. Important Safety Instructions

If you receive an unexpected or suspicious communication claiming to represent Creative 4 All, please follow these precautions.

• Do not reply to suspicious emails or messages.
• Do not click any links contained in suspicious emails, even if they appear to lead to our official website.
• Do not click unfamiliar email addresses, buttons, or contact links included in suspicious messages.
• Do not open, preview, or download suspicious attachments or files.
• Do not scan QR codes received through unverified communications.
• Do not enter passwords on websites opened through unexpected email links.
• Do not share verification codes, recovery codes, or other authentication information.
• Do not provide access to your website, hosting account, domain registrar, or email administration panel without independent verification.
• Do not approve unexpected quotations, subscriptions, maintenance work, or service agreements.
• Do not make payments or accept changes to banking information without direct confirmation.
• Do not install software, remote-access tools, or browser extensions requested by an unverified sender.
• Do not trust photographs, signatures, or company logos as proof that a message is genuine.

Scam messages may contain accurate information, professional language, real company details, and convincing technical recommendations.

If you are unsure about a message, stop communicating with the sender and contact Creative 4 All directly using previously established contact information.

6. How to Verify Genuine Creative 4 All Communications

Protecting our clients and maintaining transparent communication are important priorities for Creative 4 All.

If you receive an unexpected request involving your website, hosting, domain, email accounts, payments, or other digital services, we recommend the following verification methods:

• Contact Creative 4 All using a telephone number you have previously used to communicate with our team.
• Send a new email to an established company address already known to you.
• Visit our official website by manually entering creative4all.com into your browser.
• Confirm that any proposed service, quotation, or payment has been previously discussed and authorized.
• Verify requests involving changes to banking details, hosting credentials, domain ownership, or administrative access through an established communication channel.

Do not use contact information provided exclusively within a suspicious message to verify that same message.

Remember that genuine company information can be copied and included in fraudulent communications.

7. What to Do if You Have Already Interacted With a Suspicious Message

If you have already responded to a suspicious email or taken action based on its instructions, the next steps depend on what happened.

If You Replied to the Email

Stop communicating with the sender. Avoid sharing additional information and notify Creative 4 All using a trusted contact channel.

If You Clicked a Suspicious Link

Close the suspicious website and avoid entering personal information, passwords, or payment details. If you downloaded or opened a file, consider having your device checked by a qualified IT professional.

If You Shared Login Credentials

Immediately change the affected passwords through the legitimate service website or application. Review active sessions, enable two-factor authentication, and contact your authorized IT administrator.

If You Granted Website or Hosting Access

Contact your technical administrator immediately to review administrative accounts, access permissions, login activity, and recent website changes. Unauthorized access should be revoked as quickly as possible.

If You Made a Payment

Contact your bank or payment provider immediately. Explain that the transaction may be fraudulent and request assistance with stopping, recalling, or investigating the payment.

If You Opened an Attachment or Installed Software

Stop interacting with the suspicious file or application. If you suspect malicious activity, disconnect the affected device from the network and seek professional technical assistance before using it for sensitive business activities.

Preserve Any Available Evidence

Keep the original messages, screenshots, sender addresses, suspicious files, and relevant transaction records. This information may assist with reporting and investigating the incident.

8. Reporting Fraudulent Communications

If you receive a suspicious email or message claiming to represent Creative 4 All, we encourage you to report it.

• Use the phishing or abuse reporting feature provided by your email service.
• Notify Creative 4 All through an established communication channel.
• Provide relevant screenshots or message details without exposing passwords or other sensitive information.
• Report fraudulent accounts to the relevant email provider, social media platform, or messaging service.
• If financial fraud or unauthorized access has occurred, contact your bank and the appropriate authorities.

Reporting suspicious communications may help prevent other businesses and individuals from becoming victims of similar schemes.

9. Our Commitment to Client Security

Creative 4 All takes the unauthorized use of our company identity and employee information seriously.

We are reviewing the reported incidents, preserving available evidence, and taking appropriate steps to report fraudulent impersonation.

We remain committed to protecting client relationships, maintaining transparent communication, and promoting awareness of online security threats.

We also recommend that our clients maintain strong passwords, enable multi-factor authentication, keep website software updated, and verify unexpected technical or financial requests.

No unexpected request for payments, account credentials, website access, or confidential information should be trusted solely because it appears to originate from Creative 4 All.

10. Why We Are Publishing This Security Notice

Business impersonation, phishing, and identity misuse are not limited to a single company or industry.

Similar incidents have been publicly reported by other web design and digital marketing agencies, where unauthorized individuals misuse company identities and contact clients with fraudulent website-related proposals.

Modern technology, automated research tools, and artificial intelligence can make these messages more convincing by combining publicly available business information with personalized content.

Our purpose in publishing this notice is to raise awareness, help clients recognize suspicious communications, and reduce the risk of identity fraud, unauthorized account access, and financial loss.

We sincerely appreciate the clients who brought these incidents to our attention.

11. Official Statement From Creative 4 All

Creative 4 All s.a.r.l. confirms that unauthorized communications have been reported using the identity and photograph of one of our employees, along with our company’s branding and contact information.

The email address mhd.creative4all@gmail.com is not authorized to represent Creative 4 All.

Any unsolicited website maintenance proposals, quotations, payment requests, or other business communications originating from this address should not be considered official Creative 4 All correspondence.

We encourage our clients and business partners to remain vigilant and verify unexpected requests through established company communication channels.

Do not reply to suspicious messages. Do not click suspicious links. Do not open unexpected attachments. Do not share credentials. Do not make unverified payments.

Thank you for your continued trust, understanding, and cooperation.

Creative 4 All s.a.r.l.

Official Security Notice — Published October 13, 2026