We want to make you aware of a phishing campaign involving emails that are impersonating TherapyNotes®. We’ve received reports of messages claiming that a TherapyNotes account is being deactivated and prompting the recipient to take immediate action.
These reported messages are not from TherapyNotes.
One important detail to check is the sender’s email address:
The fraudulent address includes a hyphen between “therapy” and “notes,” which can be easy to miss at a glance. Keep in mind that scammers may use other addresses or techniques to make a message appear legitimate, so checking the sender is only one step in verifying an email.
How to Spot a Suspicious Email
Phishing emails are designed to look legitimate and may use familiar branding, urgent language, or account-related warnings to encourage you to act quickly.
Be cautious of emails that:
-
Claim your account will be deactivated, suspended, or restricted unless you take immediate action.
-
Ask you to click an unexpected link or sign in through a link in the email.
-
Request passwords, verification codes, or other sensitive information.
-
Come from an address that closely resembles a legitimate TherapyNotes email address but contains subtle differences, such as added characters, punctuation, or misspellings.
-
Contain unexpected attachments, unusual wording, or requests that seem out of place.
Even if a message looks familiar, avoid using links in an unexpected email to access your account. Instead, navigate directly to https://www.therapynotes.com using the website you normally use.
What to Do if You Receive a Suspicious Email
If you receive an email that you’re unsure about:
-
Do not click links or open attachments in the message.
-
Do not reply or provide passwords, verification codes, or other sensitive information.
-
Check the sender’s full email address carefully.
-
Access TherapyNotes directly rather than through a link in the email.
-
Contact our live, 24/7 TherapyNotes Support team at (215) 658-4550 or support@therapynotes.com if you’d like help confirming whether a message is legitimate.
If You Already Interacted With the Email
If you clicked a suspicious link or entered your TherapyNotes credentials on a site you do not recognize:
-
Change your TherapyNotes password immediately. If you use the same password for other accounts, change it there as well.
-
Enable two-factor authentication (2FA) to add an extra layer of protection to your TherapyNotes account. For setup instructions, see Set Up and Use Two-Factor Authentication.
-
Contact TherapyNotes Support at support@therapynotes.com so we can help you determine the appropriate next steps.
-
Report the phishing attempt to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov.
-
If you shared personal or financial information, visit IdentityTheft.gov for guidance based on the information that may have been exposed.
-
If your practice believes protected health information may have been accessed or disclosed, follow your organization’s incident response process and evaluate whether additional obligations may apply under the HIPAA Breach Notification Rule.
To learn more about how to recognize suspicious messages and report phishing attempts, see How To: Detect and Report Phishing Scams.
Stay Alert
Phishing messages can be convincing, and scammers often rely on urgency to encourage quick action. Taking a moment to verify the sender and access TherapyNotes through a trusted route can help protect your practice and your information.
If you’re ever unsure whether a message came from TherapyNotes, contact us directly at support@therapynotes.com before taking action.
