A fake ChatGPT billing email is steering users to a copy of the OpenAI login page that keeps whatever username and password they type. Josh Varden of Cofense’s Phishing Defense Center traced the email’s payment button through a Google redirect to the attacker’s page.
The lure targets ChatGPT users on work and personal accounts alike, and it copies the kind of bill a subscriber already expects. Credentials entered on the fake page go to the attacker, and the victim is sent on to an error page.
ChatGPT phishing email (Source: Cofense)
The bill looks right
The email arrives from a sender named ChatGPT with the subject line “Urgent: Update Your Payment Method to Avoid Service Interruption.” It carries the ChatGPT logo, a final-notice tag and an outstanding balance of $23.80. It warns that the account may be suspended if billing isn’t fixed within 48 hours, then offers a large green “Update Payment Information” button and signs off as “The OpenAI Team.” The deadline and the bold type push the reader to click before looking closely.
The From line is where it falls apart. It comes from support@9527db6e1a[.]nxcli[.]io, which is not an OpenAI address.
The link runs through Google
The button does not link to the phishing site directly. Its URL starts at notifications[.]googleapis[.]com, a Google API redirect that forwards the browser to the payload. That complicates the usual advice to hover before clicking. Hovering shows a Google address where a reader would expect an OpenAI one, and Varden counts that mismatch as a giveaway. Catching it means knowing that a Google link has no business on an OpenAI invoice.
The fake landing page shows the ChatGPT logo and a “Welcome back” greeting above username and password boxes. The real sign-in page lives at auth.openai.com, and the browser’s address bar shows the difference to anyone who looks.
What to block and check
Cofense listed three indicators: the Google redirect link and two paths on the same nxcli[.]io host, login.php and key.php. Mail teams can search their logs for all three. If you use ChatGPT, the check that matters takes two seconds: read the address bar and confirm it says auth.openai.com before you type a password.
Download: 2026 Credential Risk Report