Fraud alert: Scammers are impersonating our business. Read the notice →
Fraud alert: Scammers are impersonating our business. Read the notice →
Type: Company impersonation via phishing
Date: March 2026
Status: Contained
Cybercriminals frequently attempt to impersonate legitimate companies and organizations in order to steal sensitive information. These phishing attacks are designed to gain your trust by posing as a trusted entity and prompting you to reveal personal or financial information.
You may receive an unsolicited message or communication claiming to be from Peloton Technologies and referencing “Peloton’s Six-Step Guide to Payment Processing.”
This fraudulent activity involved automated submissions to a public website form and did not involve unauthorized access to Peloton’s systems or customer data. The issue has been contained and adjustments have been made to ensure it does not happen again.
Typically, these types of phishing messages may ask you to:
Phishing is a type of cyberattack in which fraudsters impersonate trusted organizations to trick individuals into:
Be cautious if you notice any of the following:
If you receive a message you suspect to be a phishing attempt:
Remaining cautious with unexpected messages can help protect both your personal information and your organization from fraud.
We are aware that Peloton’s Six-Step Guide to Payment Processing was sent to some individuals who did not request it.
These emails were generated through our website form by automated spam bots. In some cases, the message field contained spam text and may have included links that were not written or approved by our team.
A bot exploited our website form, which automatically emails a downloadable copy of the guide after a request is submitted. The bot submitted multiple requests using unrelated email addresses and inserted spam text into the message field.
Our security team quickly identified the activity and has taken steps to prevent it from happening again. These measures include additional protections against automated form submissions.
Some people may have received an email from us that they did not request.
The email may contain spam text added by the bot.
Any links contained in that text were not created by Peloton Technologies.
This incident did not involve a breach of our systems or customer data. The bot simply submitted our public website form in the same way a normal visitor would.
If you received an unexpected email from us:
You can safely ignore or delete the email.
Do not click on any links included in the message text.
The attachment containing the payment processing guide itself is safe.
