Is this Really from GoatCloud?
Verify an email, invoice or payment request
If you've received an email, invoice or payment request that claims to be from GoatCloud Communications or from me, Cliff Rohde, and something about it feels off — you're in the right place. Here's how to check, in about thirty seconds.
GoatCloud email addresses always end in one of two domains.
That's the fastest test, and it catches nearly everything.
Authentic GoatCloud email addresses end in:
- @goatcloud.com
- @goatcloud.net
Not real: any message from "Cliff Rohde" or "GoatCloud" sent from a Gmail, Yahoo, Outlook or other free email account.
Also not real: addresses built to look close. Impersonators construct addresses that read correctly at a glance. Look carefully at what comes immediately before the @ sign, and at what comes after it. If it doesn't end in one of the two domains above, it's a scam.
On a phone, you may see only the sender's name. Tap it to see the full address.
How GoatCloud actually bills
Invoices come from [email protected] through Zoho Invoice.
They are always for work we've discussed, or for a service you're already signed up for.
I never ask to be paid by gift card, wire transfer, cryptocurrency, or through a payment link from a service you don't recognize.
Things GoatCloud never does
- Send you an unsolicited renewal notice out of the blue
- Ask for your website, hosting or email passwords by email
- Demand immediate payment to keep your site from going down
- Ask you to pay a new or different account because "our billing has changed"
That last one is worth reading twice. A sudden change of payment details is the most common way this kind of fraud actually succeeds.
Known impersonation attempts
September - November 2026
This has been going on since September 2026, and the details keep changing. Don't rely on a specific address, subject line or price. The test at the top of this page is the one that holds.
Addresses used so far, and there may be others:
[email protected]
[email protected]
[email protected]
October 2026: "Website Renewal – 5 November 2026"
This message says your website renewal is due on a specific date and warns of interruptions if it isn't handled. It names no price and offers to send "a breakdown of the services due for renewal." The deadline isn't real. One recipient who replied was sent a list of charges, and a request for payment may well come next. The signature no longer shows a Gmail address or a street address, so the sender's email address is the way to spot it.
September 2026: "Website Renewal and Maintenance" and "Website Renewal and Maintenance Review"
These were signed "Cliff Rohde, Founder, GoatCloud Communications LLC," using GoatCloud's real Schenectady street address and a link to this website. The first asked for $750 for website renewal and maintenance, described in deliberately vague terms. The second described typical maintenance services with greater precision and named no price at all, inviting recipients to reply about "next steps." A message with no price in it is not reassurance.
One recipient who replied that he already had an annual agreement with GoatCloud was told this was "a newly required, mandatory online one-time renewal… separate from the annual renewal work." There is no such thing. Nothing about your website, domain or hosting ever requires a separate one-off payment on top of what you already pay.
At least one recipient who didn't reply received a follow-up a few days later. Persistence doesn't make a message genuine.
GoatCloud wasn't hacked. These are separate accounts made to look like mine, and they have no connection to GoatCloud. The scheme has been reported to Google and to the FBI's Internet Crime Complaint Center. If you've received a message from these addresses, or any other address pretending to be from GoatCloud, don't reply and don't pay.
If you got something suspicious
Call me at 518-631-4628, or write to [email protected] (feel free to forward the scam -- best to send the email as an attachment so I can see the email header information).
Don't reply to the suspicious message itself — replying tells the sender your address is live and monitored, which makes you a more valuable target, not a less valuable one.
I would much rather field a "was this GoatCloud?" call that turns out to be nothing than have you send money to a stranger. There's no such thing as bothering me with this question.
If you already replied, or already paid
Tell me anyway.
If money has actually left your account, call your bank or card issuer first — before anything else on this page. Reversals and chargebacks are time-limited, and the sooner you start, the better the odds of being made whole.
Getting defrauded is not embarrassing and it's more common than you'd guess. These scams are perpetrated by criminals who do this for a living, at volume, and they only have to be convincing once. My knowing about it helps me to warn others.
You may also wish to report the scam, whether or not successful, to:
- The FBI: https://www.ic3.gov/
- Local law enforcement
- The email service from which the scam emanated. See, for example, Google's Gmail Abuse page.
Last reviewed: November 4, 2026
