Saluca Labs
Saluca Labs

Who Is Actually Emailing You

A field guide for first-time founders

August 2026


The moment you file anything with a government office, your name, your address and your file number become a public record. Within days you will be emailed by people who have read that record, know exactly what you just did, and want your money.

They are not guessing. They are reading the same database you filed into.

The one rule

Read the domain backwards

Almost every impersonation on this page uses the same trick, and it defeats almost everyone the first time. Look at this sender:

TEAS@uspto.gov.lawoffice139.org

It reads as uspto.gov because that is where your eye stops. But a domain is owned from the right. The actual domain is lawoffice139.org, and uspto.gov is just a word somebody put in front of it. They could have written irs.gov.lawoffice139.org and it would be equally meaningless.

Find the last two labels before the first slash. That is who sent it. Everything to the left is decoration and anyone can put anything there.

Practice on these. uspto.gov.lawoffice116.us is lawoffice116.us. uspto.officepublication.us is officepublication.us. notices.sos.ca.gov.filings-desk.com would be filings-desk.com. Once you see it you cannot unsee it.

Check a sender

Paste the address. Nothing leaves this page.

Copy the sender address out of the suspicious email and paste it here. This runs entirely in your browser. No network request is made, nothing is stored, and nothing is sent anywhere. Turn off your wifi and it still works, which is the point: a page that asks you to hand over data in order to check whether you are being phished is indistinguishable from the thing it claims to detect.

It checks four things, and three of them work on domains nobody has ever reported. The known list will always be out of date; the patterns will not.

Verified examples

Received at one small company after one real trademark filing

Saluca LLC filed seven trademark applications on 19 March 2026. Every address below arrived in that mailbox afterwards, constructed to appear to originate from the United States Patent and Trademark Office. None of them did. They are listed because a real example teaches the pattern better than a description of one.

SenderActual domainWhat it claimed
TEAS@uspto.gov.lawoffice139.orglawoffice139.orgCited real statutes and TMEP sections to look official
teas@uspto.gov.lawoffice116.uslawoffice116.us"Request for Classification Clarification"
TMOFFICIALNOTICE@uspto.gov.lawoffice143.uslawoffice143.usMimics the genuine sender's display name almost exactly
teas@uspto.lawoffice133.uslawoffice133.usSame construction, one label shorter
teas@usaoffice109.comusaoffice109.com"Verification appointment scheduled. Failure to attend may result in abandonment." No such process exists
derick.paul@uspto.officepublication.usofficepublication.us"Mandatory Trademark Classification Review"
usptofederal0ffices@gmail.comgmail.comA zero in place of the letter O, sent from a free mailbox
Addresses rotate. The pattern does not. By the time you read this these specific domains may be dead and seven new ones alive. Learn the construction, not the list.

The tells

What the fakes do that the real thing never does

What genuine notices look like

Using the USPTO as the worked example

Every agency differs, but the shape is the same everywhere: the notice tells you something happened and sends you to the official database to read it. It does not contain the thing, and it does not contain a payment link.

Genuine USPTO senders
TMOfficialNotices@uspto.govOffice actions and filing receipts
noreply@uspto.govAccount and enrolment notices
subscriptioncenter@subscriptions.uspto.govMailing lists
noreply@feedback.uspto.govSurveys
data@uspto.govOpen data announcements

The genuine office-action email says, in its own words, "This email is NOT the Office action" and sends you to TSDR to read it. It even warns you about the scams, and tells you to verify by checking whether the document appears under the Documents tab in the official database.

That is the habit worth building. Never act from the email. Go to the agency's database yourself, look up your own file number, and see whether the thing the email describes is actually there. If it is not in the official record, it did not happen.

The other waves

What else arrives when you incorporate, by category

These are categories rather than verified sightings. The addresses above were received and checked; the list below is the general landscape a new company should expect, offered so you recognise the shape when it lands. Treat it as orientation, not as evidence.

Not everything unwanted is a scam

A distinction worth making carefully

Once your filing is public, licensed attorneys and legitimate service companies will also contact you, sometimes persistently. That is lawful advertising. It is not impersonation and it is not fraud, and confusing the two is both unfair and unwise.

The line is clean and easy to apply:

ImpersonationLawful solicitation
Who it claims to beThe government agencyItself. A named firm or company
The domainBuilt to look like the agency'sIts own, and it matches its website
What it wantsA payment, usually urgentlyTo be hired
The process it citesOften inventedReal, and usually correctly described
What to doDo not reply. Report itIgnore it, or engage if you want the help

No lawful advertiser is named on this page, and none should be. A firm marketing its services to a public filer is doing something entirely legal, and a public list is the wrong instrument for expressing that it was annoying.

What to do

In order, and none of it costs anything