How to protect yourself
Follow these tips to protect yourself from phishing attempts:
- Never share your OTP with anyone claiming to be an Uber employee. Providing this code could give a scammer access to your account.
- If you received an unfamiliar OTP email request, an unauthorized person is likely trying to sign in to your UEM account. Uber Eats employees will never ask you for an OTP over the phone or in an email.
- Review any emails that appear to be from Uber and confirm they’re coming from an @uber.com domain, especially if the email is asking for sensitive information (like business licenses and documentation).
- Some scammers have used fraudulent domains like john.uber.com@gmail.com to deceive users into thinking the email is coming from a real @uber.com domain.
- Before entering sensitive information such as your Uber password on any website, check that the URL in your address bar shows either https://auth.uber.com or https://login.uber.com
- Please also check that you’re on the correct Uber websites, such as https://merchants.ubereats.com, https://help.uber.com, https://ubereats.com and https://uber.com.
- Ensure that you‘ve added your store’s bank account information to UEM as soon as you join our platform.
- Verify that all UEM users are associated with your store (particularly Admin and Manager roles).
- Promptly review your bank account each periodic payout to ensure you received payment from Uber Eats.
- Ensure you are enrolled in a Passkey - A Passkey enables you to access your Uber account using your device’s built-in authentication methods, such as fingerprint, Face ID, device password, or PIN – offering an additional layer of security and a simplified login process. See here for more information on passkeys.
What to do if you suspect fraudulent activity
If you notice suspicious activity in your UEM account, such as unauthorized users or fraudulent banking information or you haven’t received payment from Uber Eats, report it immediately to your Uber Account Manager or to Uber Support.
We also suggest that you promptly reset your email password to avoid fraudsters accessing your emails.