Protect against fraud and account takeover

🚨 Heads up: Fraudulent sign-in pages are on the rise across the HR and payroll industry. To keep your account secure, always double-check email senders and website links before signing in.

How to Sign In to Eddy

You should only ever use one of these two trusted methods to sign in:

1. Go to app.eddy.com/dr/login

2. Use the official Eddy mobile app

How to Spot Official Eddy Emails

All official Eddy emails come from @eddy.com.

Eddy will never ask for personal information over email, such as your:

• Payment info
• Password
• Social Security or tax identification number
• Request payments via a 3rd party (for example, Western Union)

To view the sender, hover over (or tap and hold on mobile) the sender’s name to check the full email address. If you’re unsure on mobile, wait until you can check from a desktop computer where sender details are easier to inspect. You can also bypass email links by signing in directly through the Eddy mobile app.

✅ Example of a real sender: support@eddy.com

❌ Example of a fake sender: eddy-payroll@gmail.com

Have a suspicious email?

An email is suspicious if the sender email doesn’t end in “@eddy.com”, or if you’re simply not sure about it. Don’t respond to, click any links, or download anything in the email. If you already did, you should reset your Eddy password right away, and change your password on any other sites where you use the same password.

How to Verify Eddy Websites

Fraudsters may create fake Eddy websites to steal your login details. Look for these signs before entering credentials:

✅ Signs of a secure, official Eddy website:

• The web address ends in “.eddy.com”

  • Example: app.eddy.com

• The site displays a lock icon next to the URL (indicating it’s secure)

❌ Signs of a fake or unsafe site:

• Different domains: eddy.io, eddy.biz

• Lookalike characters: 3ddy.com, get-eddy.com

• Prefix or suffix tricks: eddy.com.runpayroll, payroll-eddy.com

• “Not Secure” warning appears in your browser