Security Best Practices

Last updated: 7 January 2026

How to verify legitimate emails and payment requests from Downtown Music

To help protect against impersonation and payment fraud, please verify emails and payment requests claiming to be from Downtown Music using our official verification steps below:

1) Official domains

Emails from Downtown Music and its associated businesses are only sent from domains ending in:

We do not use free email services (i.e: Gmail, Outlook) for any official payment or account communication.

2) Approved payment request process

Invoices, statements and any communication that relates to payment from Downtown and its affiliated businesses are issued solely via its official platforms.

Clients can access statements and any payment-related communications via the company’s respective apps and platforms.

Banking detail changes (wire/ACH) are not effective unless confirmed through the official platforms above, including out-of-band verification.

We do not request MFA codes, gift cards, cryptocurrency, or urgent secrecy for payments via email.

If you are at all concerned, please contact your respective account manager or customer service representative.

3) Security best practices

Do not click links or open attachments in unexpected messages
Navigate to our platform or website by typing the address directly or using a saved bookmark
Treat “bank account change” or “urgent wire” requests as high-risk and verify by phone using a known-good number
Do not use phone numbers or links provided inside a message you are trying to verify.
If you believe you have already provided information or sent a payment, contact your bank immediately and email phishing-reporting@downtownmusic.com

4) Reporting suspicious emails

If you have received a suspicious message, do not reply to it. Report it by emailing: phishing-reporting@downtownmusic.com

When you report a suspicious message, please include:

Sender address
Subject line
Date/time received
Screenshots or forwarded headers (if available)