How to Avoid Impersonation Fraud: Donor Security Tips
Keep your personal information, donor account access, and charitable assets secure with these simple, practical steps.
Your generosity fuels meaningful change across our community and protecting that generosity matters. Impersonation fraud (when scammers pretend to be a trusted organization, advisor, or vendor) is becoming more common across the digital landscape. Use the tips below to help protect your personal information, DonorSphere access, and charitable assets when you make gifts or recommend grants from your fund with Greater Houston Community Foundation.
1) Confirm details before sending funds or recommending a grant
Before you initiate a transfer or submit a grant recommendation, take a moment to verify the instructions. This is critically important if the request arrives unexpectedly or feels urgent. When in doubt, confirm details with a known contact, such as your Philanthropic Advisor or our Donor Services Team at 713-333-2210 or donorservices@ghcf.org.
Important: For your protection, the Community Foundation will never update or request changes to wiring transfer instructions via email. If you receive a request that appears to change wiring details, please verify it by calling us using a trusted phone number. While we work to protect your fund, the Community Foundation cannot be responsible for assets sent to an incorrect account.
Tip: Always use official gift instructions provided through our trusted channels for your charitable giving. If you need the most current instructions, contact Donor Services to confirm before you send funds.
2) Safeguard your DonorSphere access (donor account security)
Your DonorSphere username and password provide access to your account, including grantmaking, fund history, and contact information. Strengthening your login security reduces the risk of unauthorized grant recommendations and other account misuse.
- Use a unique password for DonorSphere (not reused on other websites).
- Keep your credentials private and avoid sharing logins.
- Enable multi-factor authentication (MFA) whenever possible.
- If you do not use MFA, update your password regularly.
- Consider using a trusted password manager.
Why MFA matters
When MFA is enabled, your account is protected by an additional verification step, beyond your password. In that case, using a strong, complex password is typically more effective than changing your password frequently.
How to turn on MFA
- Log in to DonorSphere and click “Options.”
- Click “User Profile” then “Security.” Please ensure you have a phone number that can receive a call or text under by clicking “User Profile” then “Contact Information.”
- Confirm your mobile phone number to update your preferences.
If you do not have a phone number listed, please reach out to your Philanthropic Advisor or our Donor Services Team.
Please note: The Community Foundation cannot take responsibility for grants made using shared or compromised login information.
3) Be cautious with third-party websites and “embedded” donation or grantmaking tools
The Community Foundation does not currently partner with third-party platforms that offer embedded donations or grantmaking widgets. While you may see these tools on other websites and may reference our name or logo, they are not managed or controlled by us. To protect your personal and financial information, we recommend avoiding any site that asks you to enter DonorSphere credentials or other sensitive information outside our official channels.
While no system is entirely immune to misuse or fraud, we take your security seriously and work diligently to safeguard our official platforms. For your safety, only log in through our website and never share your DonorSphere credentials with external websites or unfamiliar tools.
Quick checklist: Donor Fraud Prevention in 60 seconds
- Verify transfer and grant instructions using a trusted phone number—not email replies.
- Watch for urgent or unusual requests (a common sign of impersonation fraud).
- Use unique passwords and enable multi-factor authentication (MFA) for DonorSphere.
- Avoid third-party sites or widgets that ask for donor logins or sensitive information.
At Greater Houston Community Foundation, our purpose is to honor donor intent and help translate your generosity into lasting community impact. Thank you for the trust you place in us as your philanthropic partner. If you ever receive a suspicious message or request related to your fund—or if you simply want to verify instructions—please call our Donor Services Team at 713-333-2210.
More Helpful Articles by Greater Houston Community Foundation:
- What is a Donor Advised Fund? The Completed Guide
- $500,000 Invested in Houston’s Future
- How to Choose the Right Charitable Vehicle for Your Giving Goals
- Retirement Redefined: How Philanthropy Can Fuel Your Purpose
This website is a public resource of general information that is intended, but not promised or guaranteed, to be correct, complete and up to date. The materials on this website, including all comments and responses to comments, do not constitute legal, tax, or other professional advice, and is not intended to create, and receipt or viewing does not constitute, nor should it be considered an invitation for, an attorney-client relationship. The reader should not rely on information provided herein and should always seek the advice of competent legal counsel and/or a tax professional in the reader’s state or jurisdiction. The owner of this website does not intend links on the website to be referrals or endorsements of the linked entities.