# Recognize a fake Drime email

Drime emails you from no-reply@drime.cloud and contact@drime.cloud. Learn how to spot a fake Drime email, what to do if you clicked, and how to report it.

Updated: 2026-10-22  
Source: https://drime.cloud/support/security-and-privacy/recognize-phishing

Drime sends its emails from two addresses: [no-reply@drime.cloud](mailto:no-reply@drime.cloud) and [contact@drime.cloud](mailto:contact@drime.cloud). An email that claims to come from Drime but is sent from another address may be phishing: an attempt to get your password or other information.

## Check the sender

Look at the full address of the sender, not only the name shown. It should be [no-reply@drime.cloud](mailto:no-reply@drime.cloud) or [contact@drime.cloud](mailto:contact@drime.cloud).

Be careful with an address on a domain that only looks like drime.cloud, with a letter changed or a word added.

## Check where links lead

Before you click a link in an email, check where it goes: on a computer, hover over it to see the address.

The safest way is not to use the link at all: open Drime yourself by typing app.drime.cloud in your browser, then look for the information there. If a page asks you to sign in, check that the address bar shows app.drime.cloud before you type your password.

## Emails Drime really sends

- An alert when your account is signed in from a new device. You cannot turn it off. See [I got a new sign-in alert](https://drime.cloud/support/security-and-privacy/suspicious-sign-in).
- The notifications you chose, for example when a file is shared with you, when you are invited to a workspace or when a signature is requested. See [Choose your notifications](https://drime.cloud/support/account-and-settings/notifications).
- The replies to your support requests.

## If an email asks for your password, a code or a payment

Don't answer it and don't use its links. Open Drime yourself at app.drime.cloud and check there whether anything is needed. If you have a doubt, [contact Drime support](https://drime.cloud/support/getting-started/contact-drime-support) and describe the email.

## If you clicked or typed your password

1. Change your Drime password at once.

   If you can no longer sign in, see [Reset a forgotten password](https://drime.cloud/support/getting-started/reset-your-password).

2. Sign out the sessions you don't recognise.

   See [See and sign out your sessions and devices](https://drime.cloud/support/account-and-settings/sessions-and-devices).

3. Turn on two-factor authentication.

   See [Turn on two-factor authentication](https://drime.cloud/support/security-and-privacy/two-factor-authentication).

For the complete checklist, see [I think someone else is using my account](https://drime.cloud/support/security-and-privacy/account-hacked).

## Report it

- A suspicious email: [contact Drime support](https://drime.cloud/support/getting-started/contact-drime-support), or write to [contact@drime.cloud](mailto:contact@drime.cloud).
- A Drime shared link used for phishing: open the link page, click **Report a problem** and choose **Spam, fraud or phishing**. See [Report an abusive link or content](https://drime.cloud/support/security-and-privacy/report-abuse).

## Next steps

- [I got a new sign-in alert](https://drime.cloud/support/security-and-privacy/suspicious-sign-in)
- [I think someone else is using my account](https://drime.cloud/support/security-and-privacy/account-hacked)