This guide will help you spot fake messages, scams, and unauthorized activity to keep your iHerb account secure.
How to Know if a Message is Really from iHerb
To protect yourself, it is important to know how we communicate. iHerb will never ask you for sensitive private information via email, text message, or phone call.
We will never ask for your:
- Full credit card number
- Bank account details
- Password
- Social Security Number (SSN)
Note: If a message creates a sense of panic or urgency (e.g., "Act now or your account will be deleted"), it is likely a scam.
Common Scams to Watch Out For
Scammers use tricks to steal your money or identity. Be on the lookout for these common tactics:
1. Fake Emails and Texts (Phishing)
You may receive emails or text messages that look like they are from iHerb, delivery courier (like DHL or UPS).
- The Trap: They ask you to click a link to "track a package," "update payment info," or "confirm your account."
- The Reality: The link takes you to a fake website that steals your login info or other sensitive information.
2. Fake Phone Calls
Someone may call you claiming to be iHerb support regarding an order or account issue.
- The Reality: If you receive an unsolicited call claiming to be us, hang up immediately. iHerb does not call customers.
3. Pop-Up Security Alerts
A pop-up on your screen may claim your device has a virus or a security breach.
- The Trap: It tells you to call a support number or download software.
- The Reality: These are scams designed to install malware on your device.
4. "Too Good to Be True" Prizes & Fake Promotional Offerings
Be suspicious of unexpected notifications claiming you won a prize, giveaway, or free gift.
- The Red Flag: They ask for a fee to claim the prize or require extensive personal details upfront.
- The Reality: The link takes you to a fake website that steals your login info or other sensitive information.
5. Unknown Subscriptions or Calendar Invitations
You might receive unexpected calendar invitations or notifications about new subscriptions you never signed up for.
- The Trap: They ask you to click a link to "confirm subscription" or "join the meeting".
- The Reality: The link takes you to a fake website that steals your login info or other sensitive information.
What to Do If You Suspect Fraud
If you receive a suspicious text, email, or phone call, follow these steps immediately:
- Do Not Click: Do not open links, download attachments, or reply to the message.
- Do Not Share: Never give out passwords or payment info.
- Report It: Forward the details of the suspicious message or phone call to our security team at verify@iherb.com. Please include a brief note explaining the situation so we can investigate.