Trackline
I got a link — is it genuine?
Yes, if you were expecting it from that company. And three ten-second checks confirm it without calling anyone.
**Short answer: if you were expecting that company to ask you for paperwork, it is genuine.** A Code Contract email always exists because a specific someone —a client, a contractor, an accountant— started a request addressed to you. It never sends itself.
The three checks, in ten seconds
- 1
Does it say which company is asking, and what for?
A legitimate request names the sender and the document. A scam tends to be vague and urgent.
- 2
Does the link go to codecontract.io?
Check before tapping — hover on a computer, long-press on a phone.
- 3
Is it asking for documents, or for something else?
Here you upload and sign documents. Passwords, card details and transfers are never requested.
Important
**What this system will NEVER ask you for: your email password, card details, a payment, or to install anything.** If a message claiming to be ours asks for any of those four, it is not ours. There are no exceptions and no special cases, so you do not need to weigh up whether this is one.
If you are still unsure
Watch out
The rare but real case: **a genuine link you were not expecting**. It usually means whoever started it is someone at that company you do not normally deal with —purchasing rather than your usual account manager— or that the request was meant for a colleague and reached you. One phone call settles it, and it is worth making before uploading anything.
›Do I have to create an account?
Not to answer a request. You go in through the link.
›What if the link has expired?
Ask whoever sent it for a new one. It is not your mistake.
›Can I forward it to a colleague?
Yes, but tell the requester: there will be a record of who uploaded what.
A real case
The situation
You receive a document request from a client you do work with, but from someone you have never dealt with.
What you do
- Checks the link goes to codecontract.io
- Calls their usual contact to confirm who started it
What you get
The paperwork goes up with the doubt settled and without having replied to the email.
The situation
A similar message arrives asking for your email password «to verify your identity».
What you do
- Discards it without tapping anything and warns the impersonated company
What you get
The scam is stopped and the impersonated company finds out in time to warn others.
The situation
A link arrives and nothing was expected from that company.
What you do
- Phones the usual contact before opening it
What you get
The check happens through a different channel.
The situation
The link asks for data nobody usually requests.
What you do
- Stops and checks before entering anything
What you get
No data is given to somebody who should not have asked.
The situation
The sender address is similar but not identical.
What you do
- Compares with earlier emails from that company
What you get
The difference is obvious.
The situation
The request was expected and everything fits.
What you do
- Goes in and uploads what is asked
What you get
The delivery is resolved the same day.
This article answers
- i got an email asking for documents is it safe
- is the link they sent me fake
- how do i know if a document request is phishing
- asked to upload papers to a website