Skip to content
UsherUsher

Report abuse

Seen a sign-in page that isn’t right?

Usher hosts a sign-in page, the Lobby, for every app that uses it. If one is being used to trick people, tell us and we’ll look at it straight away.

Email abuse@usher.hallelo.net

This opens your email app. There is no form, and nothing is sent until you send it.

Before you sign in

How to tell it’s really the Lobby.

Look at the address bar, not the page. A page can copy how the Lobby looks; it can’t copy its address.

  • The address

    A Lobby lives at an address ending in .id.hallelo.net, after the app’s own name (for example acme.id.hallelo.net), or at the company’s own domain, such as login.acme.com, once the company has proved it controls that domain. Usher accounts live at account.usher.hallelo.net.

  • Where it says you’re going

    The Lobby always shows “Continuing to” and the name of the app. If that isn’t the app you meant to use, stop.

  • What it asks for

    The Lobby asks for your email, a code we sent you or one from your authenticator app, your passkey, or your password. It never asks for card details, a code from your bank, or your password for another service.

Reporting

What to send us.

The more we know, the faster we can act. Don’t send us your password, even to show what was asked for.

  1. 01The full address of the page, copied from the address bar.
  2. 02How you came across it: the email, message or advert, forwarded or pasted if you can.
  3. 03A screenshot, if you have one.

What we do

We check the report, and if an environment is being used to deceive people we suspend it. A Lobby’s address is never given to anyone else afterwards, so it can’t be reused for the same trick.

Found a security problem in Usher itself? Write to security@usher.hallelo.net instead.