How do you spot a fake WeTransfer email?

WeTransfer is a great way to send large files to people via email. However, the service is also a common target for fraudsters, who create fake WeTransfer emails to get people to click on malicious links. We’re going to show you how to spot a fake WeTransfer email.

Signs a WeTransfer email is fake

There are a few telltale signs that a WeTransfer email, such as the one shown above, is a scam.

1. The first thing to check is the sender’s address. Most email apps hide the actual address, so you may have to click on the sender’s name to reveal the full email address. Although the sender of this email is called ‘WeTransfer’, when I click on that sender’s name it reveals the sender’s email address is actually [email protected], as shown below. That’s clearly not coming from WeTransfer. Genuine WeTransfer emails arrive from [email protected].

2. Look again at the full email shown above. It says “You have received some files via wetransfer”. The brand name is WeTransfer, with a capital W and T. Mistakes like this are a warning bell that something isn’t right.

3. The list of files you’re being invited to click on includes ‘Purchase Order’ and ‘List of items’. It’s classic baiting. The fraudsters are trying to con you into thinking someone has placed an order using your or your company’s account details. ‘Invoice’ or ‘Your receipt’ are other common traps.

What does a genuine WeTransfer email look like?

At the time of writing in June 2026, a genuine WeTransfer email looks like this:

Note that WeTransfer has recently changed the logo at the top of its emails, replacing the “we” logo with the company’s full name, so if you’re still getting emails with the old logo on them, that’s a clear sign it’s a fake.

Still, the fake and genuine messages are pretty similar and you can see why people are caught out. If you’re not expecting a WeTransfer message, it’s normally best to ignore it.

What should I do with a fake WeTransfer email?

Nothing. Just delete it. You can try marking it as spam in your email app, but the email domains used by fraudsters change so quickly that it’s unlikely to have any effect.

Don’t click on any links in the email, even out of curiosity, because it could trigger a malicious download and will confirm your email address is active and susceptible to cons. It will likely massively multiply the amount of junk you receive.

Also avoid the temptation to reply to the email, giving the fraudster a piece of your mind. They won’t read it and it will only confirm your email address is active, leading to more spam.

Related reading: How to secure your business online