Rediroff.ru e-mail scam: how to spot it and what to do
Thousands of websites are created and deleted every single day. More reputable and trustworthy websites remain online for years or even decades, while others are shut down for one reason or another.
Facts checked October 7, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
Do it yourself · free Remove Rediroff.ru e-mail scam yourself 4 steps, about 12 minutes, no software needed.
Start the steps
Rediroff.ru e-mail scam: summary
| Distribution | Redirects from malicious websites, links on social media. Adware is mostly spread via software bundles and fake ads |
|---|---|
| Name | Rediroff.ru |
| Type | Scam |
| Dangers | Financial losses, malware infections, personal information disclosure to malicious parties, etc. |
| Symptoms | A phishing e-mail asking you to sign in |
| Evidence | 4 write-ups by security sites; details still limited |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 6 more facts
| Arrives as | |
|---|---|
| Pretends to be | |
| Claim | Your account needs urgent attention |
| Asks for | Your password |
| First seen | 13 December 2021 |
| Facts checked | 7 October 2026 |
What the Rediroff.ru e-mail scam e-mail looks like
From our report of Dec 2021 · not reviewed since
Rediroff.ru is a scam website that is spread via social media platforms like WhatsApp
Thousands of websites are created and deleted every single day.
More reputable and trustworthy websites remain online for years or even decades, while others are shut down for one reason or another. Rediroff.ru is a website you should definitely not trust, as it spreads various scams and employs phishing techniques for malicious purposes.
While some users might be redirected to the website by accident, they usually receive a private message via social media or communication platforms such as Discord, WhatsApp, or Facebook Messenger (which is typically written in Spanish). Another way users might end up on malicious websites is adware - a type of software that is usually installed behind their backs.
As soon as users are redirected to the site, they might be presented with all sorts of fraudulent content. For example, they might be shown a typical shop where items can allegedly be purchased - users later find out that the order is completely fake and they never received what they have ordered.
In other cases, people might be shown a phishing message claiming that they have won a particular sum of bitcoin and that they need to send 0.01 bitcoin to receive it. As evident, this is nothing but a scam, and these messages should be straight out ignored.
If you have come across the Rediroff.ru website after clicking a link on a messaging app or were redirected to it, you should not interact with the presented content. Otherwise, you might suffer from monetary losses, personal information theft, or you might be tricked into installing malicious software on your device. If you have interacted with the scam, please check out the remediation process below.
From our report of Dec 2021 · not reviewed since
How the scam spreads and how to avoid being tricked
Every year, billions of dollars are lost due to scams, and the number is constantly rising, especially in the woke of the pandemic when people spend more time at home.
The increase of malicious activity online is significant - cyberattack output is also at all times high. Therefore, it is the best time to reduce the probability of encountering fraudulent websites and also ensure that precautionary measures are used.
As we already mentioned, there are several ways how Rediroff.ru scam can be spread. Here are some tips that should help you to avoid it:
Messaging apps are extremely popular and are used by millions of users for instant communication via text or video calls. Their usage was elevated due to the pandemic even more, as more people were forced to work from home.
Thus, always treat each of the links from unknown sources as potentially dangerous and do not click them. If you are not sure, you can right-click the link, select "Copy link address," and check it via online analysis tools like Virus Total. Also, configure your messaging settings so that strangers wouldn't be able to message you.
Link clicks and other malicious websites. You are likely to get redirected to a scam website after clicking on a link somewhere else. This activity is more prominent on high-risk websites, such as illegal video streaming, gambling, or pirated program distribution sites. Thus, stay away from these places, as they are generally dangerous; for example, torrents might get you infected with Yjqs ransomware.
Software bundles are used to spread adware, which can be the primary cause of browser redirects. To avoid the installation of potentially unwanted programs, you should avoid untrustworthy sources when downloading software and always pay close attention to the installation process (pick Advanced/Custom settings instead of Recommended/Quick ones, read the fine print, remove ticks from pre-ticked checkboxes, confirm button placements and consequences of pressing them, etc.).
Employing adequate internet security tools can be a great way to reach such a goal.
How to tell the Rediroff.ru e-mail scam e-mail is fake
From our report of Dec 2021 · not reviewed since
- Perform a full system scan with to check it for infections can then secure all your personal information if you interacted with the scam
- If you found adware or malware on your device, clear browser caches and repair damaged system components with
Is Rediroff.ru e-mail scam dangerous? What the senders want
From our report of Dec 2021 · not reviewed since
Check your system for adware
While avoiding being scammed online is particularly important, it is also important to make sure that your system is not already infected with some type of malicious software.
For example, once redirected to Rediroff.ru or a similar site, you might be asked to install something - it could be a potentially unwanted program or even malware.
In some cases, malware could also be installed without user interactions at all, as long as their browser or other software on the device is vulnerable. To prevent this from happening, make sure all programs, including the operating system, are updated with the latest security patches.
1. Check for installed programs
First of all, you should check the installed applications in Control Panel in Windows or Applications in Mac. Go through the list and uninstall everything suspicious. If you are not sure about something, skip this step.
To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:
2. Uninstall useless extensions
The next thing is to find malicious browser extensions. Proceed with the following steps:
MS Edge (Chromium)
3. Clean your browsers
Cookies and other technologies might be used to track you. You can either reset the browser or clean it for the best results.
Regardless of whether you found anything by following the steps mentioned above, you should always employ , , or another reputable anti-virus to check your system for malware. Most malicious programs, especially those that are designed for spying or generating hidden traffic, are programmed to be stealthy.
This means that they might not have a visible application window or might not be found within the installed apps folders. Security software can scan the hidden locations and remove the infections quickly, along with all malicious files and processes.
- Enter Control Panel into Windows search box and hit Enter or click on the search result.
- Under Programs, select Uninstall a program.
- From the list, find the entry of the suspicious program.
- Right-click on the application and select Uninstall.
- If User Account Control shows up, click Yes.
- Wait till uninstallation process is complete and click OK.
- From the menu bar, select Go > Applications.
- In the Applications folder, look for all related entries.
- Click on the app and drag it to Trash (or right-click and pick Move to Trash)
- Select Go > Go to Folder.
- Enter /Library/Application Support and click Go or press Enter.
- In the Application Support folder, look for any dubious entries and then delete them.
- Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to the unwanted program by clicking Remove.
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the window's top-right).
- Select Add-ons.
- In here, select the unwanted plugin and click Remove.
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
- Click Safari > Preferences...
- In the new window, pick Extensions.
- Select the unwanted extension and select Uninstall.
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.
- Click Menu and pick Options.
- Go to Privacy & Security section.
- Click on Clear Data...
- Select Cookies and Site Data, as well as Cached Web Content and press Clear.
- Click Safari > Clear History...
- From the drop-down menu under Clear, pick all history.
- Confirm with Clear History.
- Click on Menu and go to Settings.
- Select Privacy and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
From our report of Dec 2021 · not reviewed since
Tips if you have interacted with the Rediroff.ru scam
There could be an array of scams that could be spread via the website, so we can't give precise advice for your instance.
However, here are general tips that should reduce the probability of serious consequences of such actions, such as identity theft or being a target of further phishing campaigns:
- If you have paid for anything at all through your bank, contact it and explain what happened, the transaction might be reversible;
- Change your password for the account if you have revealed its details. Remember: do not reuse passwords;
- Employ powerful security software that would protect you from unexpected cyber-attacks;
- Closely monitor your online expenses and ensure that your bank details are secured.
What to do after the Rediroff.ru e-mail
If you only received the message and clicked nothing, step 3 is all you need.
If you clicked the link or typed anything on the page it opened, do every step, starting with the password.
Step 1: Change the password you typed on the fake page
If you typed a password on the page the Rediroff.ru message opened, assume the sender has it. Go to the real site by typing its address yourself and change the password there, choosing one you have never used.
Change it anywhere else the same password was used, and sign out all other sessions if the service offers it. Any browser on Windows 11 or Windows 10 will do, as long as you do not follow the e-mail's link.
Microsoft account, Security page (account.microsoft.com/security): Change password. Full procedure with screenshots: Turn on two-step verification / secure a hacked account
Step 2: Turn on two-step verification
With two-step verification on, a stolen password alone no longer opens the account, because a sign-in from a new device also needs a code from your phone.
Switch it on for the e-mail account first, then for banking, shopping and social accounts that use that address.
Check the recovery phone, the recovery e-mail and any forwarding rules while you are in the settings, since attackers change them to come back. The pages are the same on Windows 11 and Windows 10.
Microsoft account: Manage how I sign in, where two-step verification and the sign-in methods are. Full procedure with screenshots: Turn on two-step verification / secure a hacked account
Step 3: Report the e-mail and delete it
Do not reply and do not click anything else in the message. In Outlook select the e-mail and choose Report > Report phishing; in Gmail open the three-dot menu next to Reply and pick Report phishing.
That trains the filter for everyone on the service, and the message goes to the junk folder. If the e-mail came to a work address, forward it to your IT team as an attachment first.
The steps are the same in the web mail and the mail apps on Windows 11 and Windows 10.
New Outlook for Windows and Outlook on the web: Report > Report phishing. Full procedure with screenshots: Report a phishing e-mail
Step 4: Scan the PC if you opened a file from the message
A fake sign-in page only steals what you type, so most readers can skip this step. If the Rediroff.ru e-mail made you download or open a file, delete it and scan the PC.
In Windows Security > Virus & threat protection > Scan options, run a Full scan and then Microsoft Defender Antivirus (offline scan) > Scan now. The offline scan restarts Windows 11 or Windows 10 and takes about 15 minutes.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Access your website securely from any location
When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. The best solution for creating a tighter network could be a dedicated/fixed IP address.
If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for the server or network manager that needs to monitor connections and activities. VPN software providers like can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world.
Recover files after data-affecting malware attacks
While much of the data can be accidentally deleted due to various reasons, malware is one of the main culprits that can cause loss of pictures, documents, videos, and other important files.
More serious malware infections lead to significant data loss when your documents, system files, and images get encrypted. In particular, ransomware is is a type of malware that focuses on such functions, so your files become useless without an ability to access them.
Even though there is little to no possibility to recover after file-locking threats, some applications have features for data recovery in the system. In some cases, can also help to recover at least some portion of your data after data-locking virus infection or general cyber infection.
Questions about Rediroff.ru e-mail scam
Could Rediroff.ru be a genuine message?
We checked it, and it is not. Facebook is only the costume. The message exists to get your password, and real companies handle that inside your account, after you sign in normally, not through links, attachments or phone numbers in a message you did not expect.
Scammers copy logos and footers perfectly, so the design proves nothing. The sender address, the link target and the request are the reliable signs, and all three point to a scam here. Delete it, and if you are worried, check your account directly.
Why does Rediroff.ru say that your account needs urgent attention?
Because that story works. A problem that needs fixing, a deadline and a simple solution make people act before they check.
The claim that your account needs urgent attention is the same for everyone who received Rediroff.ru; it was written once and sent in bulk. Nothing about your own situation triggered it.
If you are unsure, look at the real account or service the normal way, without using the message. The claim will not be there, which settles the question. Then report the message.
What does Rediroff.ru want from me?
In the end, your password. Everything else in Rediroff.ru, from the logo to the deadline, is there to get you to that point without stopping to think. Knowing the goal helps you judge your risk.
If you did not give it, you lost nothing and can delete the message. If you did, the steps in this guide are ordered by what you handed over:
- passwords first
- then card and bank details
- then documents and anything you installed
- ran
Act on the highest item on that list first.
How do I contact the real Facebook?
Not through anything in Rediroff.ru. Type the official website address into the browser yourself, use the app you already have, or use the phone number printed on your card, contract or a previous genuine invoice.
Search results can be risky too, because scammers buy ads for support numbers. Once you reach the real Facebook, you can ask whether there is any problem with your account and report the scam message; many companies have a dedicated address for phishing reports on their security page.
What is the single best habit against scams like this?
Never act on a message through the message itself. If something claims to be from Facebook and asks you to sign in, pay, call or open a file, close it and go to the service the way you always do:
- a bookmark
- the app
- the number on your card
Real problems will be visible there. This one habit defeats almost every phishing, invoice, delivery and account-suspension scam, regardless of how convincing the design is, because the scammers can copy the look but not the real account.
Why did I receive Rediroff.ru?
Scam messages go to millions of addresses and numbers collected from data breaches, public websites and simple guessing. Receiving Rediroff.ru does not mean your PC is infected or that an account of yours was hacked.
If the message includes an old password of yours, it comes from a breach of some website; change that password wherever you still use it. Mark the message as spam or phishing so your provider blocks similar ones. Never reply to ask to be removed from the list: the sender treats a reply as proof that the address works.
Can I trick the scammers or waste their time?
Better not. Replying to Rediroff.ru confirms that your address or number is live and puts it on lists that sell for more. Scammers who are teased sometimes switch to harassment or try to use any detail you reveal, such as your name, employer or location.
Playing along also risks a slip, like opening a link or a file they send. Report the message, block the sender and delete it. Your report does more damage to the operation than a conversation would.
I opened the message. Is my computer infected?
Opening and reading a message is safe in modern mail apps and browsers; images and text do not install anything by themselves. Your PC is at risk only if you opened an attachment, ran a downloaded file, or followed instructions to paste a command or install a program.
If you did none of that, delete the message and move on. If you did, disconnect from the internet and run a full scan and the Microsoft Defender offline scan. Do not reply to the sender or click links in the message later either.
Is it worth reporting a scam if I lost nothing?
Yes. Reports from people who did not fall for Rediroff.ru are how blocklists, mail filters and hosting companies find new scam pages quickly, often before most recipients open the message. Reporting the message as phishing in your mail app is enough for most people.
If the message impersonates a company, its security or abuse team usually accepts forwarded copies too. Police reports matter mainly when money or documents were lost, but national fraud centres also collect reports without losses to spot campaigns.
Will Fortect remove Rediroff.ru?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Rediroff.ru, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Fox Business: Record $4.2 billion stolen through online scams in 2020: report (read October 7, 2026)
- Wikipedia: Vulnerability (computing) (read October 7, 2026)
- FTC: How to recognize and avoid phishing scams (read October 7, 2026)
- CISA: Recognize and report phishing (read October 7, 2026)
- Microsoft Support: Protect yourself from phishing (read October 7, 2026)