High riskEmail Scams

Data Download Ready Email Scam

This scam emails that your requested data download or account export is ready, urging you to log in to retrieve it before it expires, leading to a fake login page that captures your credentials.

Quick verdict

Risk level
High risk
Scam type
Notification-lure phishing
Main red flag
An email says your data export is ready and links you to log in to download it.
What to do first
Do not use the link. Access any export through the official account directly.

What this scam usually looks like

This scam emails that your requested data download or account export is ready, urging you to log in to retrieve it before it expires, leading to a fake login page that captures your credentials.

Example message pattern

Example pattern — not a real report
Example pattern: 'Your account data download is ready. Sign in to retrieve your file before it expires in 24 hours: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • A data export or download you did not request
  • A login link to retrieve the file
  • Pressure that the download will expire
  • A login page that is not the official service
  • A generic greeting with no account detail

What to do

  • Access any export by logging in to the official account directly
  • Verify whether you actually requested a download
  • Report the email as phishing and delete it
  • Enable two-factor authentication where available

If you already clicked or replied

  • If you entered your login, change it immediately from a trusted device
  • Enable two-factor authentication and review activity
  • Update the password anywhere you reused it
  • Watch for further targeted phishing

What not to do

  • Do not log in through data-download links
  • Do not act on a download you did not request
  • Do not let expiry pressure rush you

Similar scams

Frequently asked questions

Did I request this data download?
If you did not request an export, treat the email as phishing. Genuine exports are retrieved by logging in to the official account directly.
Why use a 'data ready' lure?
It sounds routine and legitimate, encouraging you to log in on a fake page so the scammer can capture your credentials.
I logged in through the link. What now?
Change that password from a trusted device, enable two-factor authentication, review activity, and update reused passwords.
How do I get a real export?
Log in to the official account or app yourself and request or retrieve any data export from within your account settings.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.