Phishing and fake messages

Phishing messages try to trick you into handing over your password, payment details, or personal information by pretending to be from a service you trust. Here's how to spot one that's pretending to be Rainbow Tour Guides.

What we'll never ask for

We will never ask you for your password, or send you a link asking you to "re-enter" your password outside of a sign-in or password reset flow that you started yourself. We also won't ask you to pay outside the platform's own checkout — see Scams and off-platform payments.

Signs a message might not be legitimate

• It asks you to click a link and enter your password or payment details "to verify your account," when you didn't request anything.
• It creates urgency — a threat to suspend your account, a countdown, or pressure to act immediately.
• It asks you to move a conversation about a booking somewhere off the platform. This is worth noticing on its own, since chat between a traveler and guide only opens once a booking is paid and confirmed — a message trying to start a conversation before that point isn't coming from a real booking flow.
• The sender address or link doesn't match what you'd expect, or the message has odd formatting, spelling, or generic greetings.

Account emails you can expect

The only emails that ask you to take an account action — like verifying your email or resetting your password — are ones triggered by something you did, such as signing up or requesting a password reset. If you get one you didn't request, you can safely ignore it; your account hasn't been affected just because an email arrived. If you're having trouble with a verification or reset email you did request, see A verification or reset email has not arrived.

If you clicked something you shouldn't have

If you think you entered your password or payment information somewhere that wasn't really Rainbow Tour Guides, change your password right away from Sign in and reset your password, and let us know. See Report a safety concern.

Still need help?

Reach our team through the contact form if you're unsure about any message claiming to be from us.