10 Ways To Keep Your Salon Safe From Scams

Beth Ryan - September 24, 2025 - 5 mins read

Online scams are on the rise. Hackers go after businesses that are big enough — and where money can be made. Because Treatwell is the number one beauty & wellness marketplace in Europe, we’ve become an appealing target for them.

We want you to know that our platform itself is highly secure. We have a dedicated team working to keep Treatwell protected and to prevent attacks directly on our systems.

However, when attackers cannot breach our defenses, they switch strategies: they target you with fake emails, phone calls, or texts to trick you into giving away your login details. 

Their goal is usually to break into partner accounts and change the bank details (IBAN, SWIFT) we use to pay you. If they succeed, your revenue could be redirected to them instead of your salon.

But that’s not all: sometimes scammers pretend to be Treatwell in order to sell fake products or even trick you into signing fraudulent contracts.

The risk is real, and it can have a direct financial impact.

That’s why your awareness and caution is  so important.

This guide will show you exactly how to protect yourself.

How you can protect yourself

1. Understand phishing

Most scams start with a fake email, SMS, or even phone call. This is called phishing (it sounds like “fishing”) because the attacker is “fishing” for your sensitive information. They’ll pretend to be Treatwell, or another trusted company, and try to trick you into sharing your login details, clicking on a link, or opening an attachment.

2. Always check the sender

All real Treatwell emails come from our verified domains. These always end in @treatwell.ie OR @treatwell.com.

  • Safe: partners@treatwell.com, partnerchat@treatwell.ie
  • Unsafe: support@treatwell-info.com, partners@treatwel-secure.org, treatwell@gmail.com

Pay close attention to what comes after the @ sign — that’s where scammers often try to sneak in changes.

3. Look closely at the link

Before clicking a link, hover over it (desktop) or press and hold (mobile) to check where it leads.

  • Safe: connect.treatwell.com, partners.treatwell.ie
  • Unsafe: buy-treatwell.com, treatwell-secure.net, www.myschoolwebsite.com/treatwell

If the link looks suspicious, don’t click.

4. Never share your password

Treatwell will never ask you for your password over email, phone, or chat. If someone asks, it’s a scam — hang up or delete the message.

5. Use a strong, unique password

Your password is your first line of defense.

  • Use a mix of letters, numbers, and symbols.
  • Never reuse your Treatwell password on other websites. Every day, websites around the world — even large, well-known ones — are hacked, and their user databases (including passwords) are stolen. If you used the same password for Treatwell and, for example, your kids’ school website, hackers can take the stolen password from the school site and try it on Treatwell. This method is called “credential stuffing,” and it’s one of the most common ways accounts get hacked.
  • Change your password regularly, especially if you suspect something might have been compromised.

6. Be careful with bank details

If anyone contacts you asking to confirm or change your IBAN/SWIFT, always double-check with us through official Treatwell support. Hackers aim to redirect payments — don’t give them the chance. You will get an email from Treatwell if bank account details are changed, please look out for it and act immediately if it was not you that changed it. 

7. Watch out for “fake Treatwell” offers

Scammers may also pretend to be from Treatwell to sell you products or ask you to sign contracts. If you’re unsure about any offer or document, contact us before taking action.

8. Trust your instinct

If something feels odd — maybe the tone of the email, urgency in the message, or a strange link — stop and check with us. It is always better to be safe.

9. Stay cautious on phone calls

Scammers may also try to call you, pretending to be from Treatwell. Remember:

We will never ask for your password over the phone, email, or chat.

  • If you are ever in doubt about whether you are really speaking with a Treatwell representative, you can ask the caller to send you a confirmation email from an official Treatwell address, that always ends with @treatwell.(country code). Such as: @treatwell.com / @treatwell.ie.
  • A real Treatwell sales rep or customer support agent will always be happy to do this so you can verify their identity before continuing the conversation.

10. Manage your team’s access rights

In addition to protecting your login details, make sure that each team member has the right permissions for their role in your agenda. By regularly reviewing and updating team access, you reduce the risk of errors and keep your business safer. In this article you can learn more about team permissions and how you can update them.

Grow your business beautifully
Start for free