If you've recently registered a new domain name (website address), renewed an existing domain name, or your domain name is coming up for renewal or ready to expire, you may have started receiving emails about your domain name. BE CAREFUL, as some of those emails may be fake.
Read any emails you receive about your domain name thoroughly. If it asks you to click on a link or a button, hover over the link first without clicking it. When you hover over a link, the link address appears in the bottom left corner of your browser. Does the link look "suspicious"? Does it include words that have nothing to do with domain names? For instance, I received an email the other day that supposedly came from GoDaddy, but the link address was not godaddy.com; it was an odd address with the word "gameday" in it. Some emails can be trickier and more legitimate sounding though.
If you get a bill for domain services by regular mail, it is almost always going to be a scam. Some of these "invoices" will actually say in the middle of the page that it's a "solicitation, and not a bill".
It's all about money! In the email I received, I was told that the official-sounding company "DomainServices.org" would submit my domain name to the top search engines for only $97 after a $300 coupon discount. All I had to do is enter my credit card information. If you fall for this scam, at the least, you'll be throwing money away because "search engine submission" hasn't been a valid service since 2005! But the more likely scenario is that you'll end up a victim of credit card fraud.
How can you protect yourself against these kinds of scams? You can pay for "Full Domain Privacy & Protection" for your domain name through your domain registrar. This hides your public information in public "whois" listings that scammers frequently use. I can set up private registration when I set up your domain name. But the best way to protect yourself against these scams, and all email scams in general, is to be aware, read the email in detail, hover over the link, and don't provide your contact information or credit card number through links in unsolicited emails.
If you're still not sure if that email is legitimate or not, contact your domain name or web hosting company, or the person who set up your website.