Phishing attacks happen when someone pretends to be a trusted company or person with the intention of tricking you into sharing sensitive information and compromising your account with us. These messages often look like real emails or notifications but are linked to fake or fraudulent websites.
Airwallex does send email notifications from time to time, so it’s important to know how to confirm that a message is from Airwallex and thus trustworthy or otherwise. This article is to guide on how to determine if the message is from Airwallex. We’ll update this guide periodically but it is important to be vigilant and check in with us if you are not sure.
The most important rule
Before you click any link or open any attachment in an email that appears to be from Airwallex:
- Open the sender details in your email app and look at the full email address.
- Check the part after the “@” (this is the domain).
- Confirm it matches one of the authorised domains below exactly.
If the domain is not listed here, treat the email as suspicious.
Authorised Airwallex email domains
Airwallex sends customer emails only from addresses where the part after the @ ends with one of the domains below. This includes our main domain and certain subdomains we control.
airwallex.com and related subdomains
Examples of domains:
- airwallex.com
- mg.airwallex.com
- scmail.airwallex.com
- info.airwallex.com
- e.airwallex.com
Example email addresses:
- support@airwallex.com
- support@mg.airwallex.com
airwallex.io and related subdomains
Examples of domains:
- airwallex.io
- try.airwallex.io
- signup.airwallex.io
- trial.airwallex.io
- start.airwallex.io
Example email addresses:
- customer-success-sg@airwallex.io
- customer-success-hk@airwallex.io
Other authorised domains
These domains are also used to send legitimate Airwallex emails:
- getairwallexpayments.com
- e.g. no-reply@getairwallexpayments.com
- getairwallexservices.com
- e.g. no-reply@getairwallexservices.com
- tryairwallexpayments.com
- e.g. no-reply@tryairwallexpayments.com
- tryairwallexservices.com
- e.g. no-reply@tryairwallexservices.com
Note:
- All legitimate Airwallex emails to customers will come from an address where the part after @ ends with one of the domains listed above.
- This list may change over time; this article will always show the current authorised domains.
- Please check carefully because we have seen many “fake” emails that look very similar to ours.
What Airwallex will and will not do
Understanding what we typically send (and what we never ask for) can help you spot suspicious messages.
We may:
- Send you security alerts, product updates, and service messages.
- Address you by your name or business name where we have that information.
We will not:
- Ask you to reply with your password, full card details, or 2FA codes.
- Ask you to log in via links that do not clearly belong to airwallex.com.
If an email asks for this kind of information, it is not from us. If in doubt, please ask us on support@airwallex.com.
If you are unsure about an email
If something about an email feels off, or you’re not sure it’s really from Airwallex, follow these steps.
1. Do not interact with the email
- Don’t click links, buttons, or attachments.
- Don’t reply with any information.
2. Access Airwallex via trusted channels
- Manually type airwallex.com into your browser, or
- Use the official Airwallex mobile app, and check for any related notifications there.
3. Contact us using known details
- Use in-app support from the Airwallex web or mobile app, or
- Email us at support@airwallex.com (this is listed above as an authorised domain).
If you can, include:
- A screenshot of the suspicious email, and
- The full sender address,
so we can investigate. We investigate every query and will respond to you.