Today, many Peloton members received a suspicious looking email, seemingly sent from Peloton that caused many people to wonder if it was a scam, spam, or an development email sent in error.
Peloton has since confirmed this email was sent by the company, however, it was a test sent in error. Given the message was sent from Peloton (it was not a spam email, or a scam), accounts have not been compromised, even if members clicked the link in the email.
Update – Peloton has re-emailed some of those members who received the first email, letting them know it was sent in error. The correction said:
You may have recently received an email from a Peloton account that was sent in error. We apologize for any concern or confusion. Rest assured that your account has not been accessed or compromised and this was not a phishing attempt. Please disregard the email; no additional actions are needed. Again, we sincerely apologize for any inconvenience this may have caused.
Peloton also posted a status update on their site about the emails as well, more than 24 hours after they were first sent out. That message, in part, said “We can confirm the email did come from Peloton, but it was an administrative test sent in error.”
The original emails, which were sent with the subject of “Just a Subject line”, asked members to verify their email address. It said:
Verifying your email address helps us confirm we have the right contact information to send you important messages about your account.
To complete the email verification process, please click the button below.
The email sent to some Peloton members today.
The link the button pointed to did not actually go anywhere.
However, there were a number of concerning elements about the email – including the fact real links weren’t included.
For one, the subject line of “Just a subject line” was out of the ordinary.
In addition, the sender of the email address was “Peloton DEV” – not a normal email account Peloton uses. However, the actual sending domain of the email was set to mail.op.onepeloton.com – a true Peloton domain.
As we mentioned above, a few hours after these emails were sent out, Peloton confirmed to us that the original email was sent in error – but it was sent by the company. The next day, Peloton then began sending emails out to members notifying them of this error directly. You can see the “correction” email sent below.
Correction email sent by Peloton.
The most likely scenario for the original error email is that a Peloton developer was working on a verification email to send to some Peloton members (thus the Peloton-dev email address). Somehow, rather than sending that test email to themselves, they managed to send to a large portion of the real Peloton email base. This would account for parts of the email being incomplete (no link to actually verify) and the placeholder email subject “Just A Subject Line”.
So even if you received this email, and clicked on the link, your Peloton account (or any other information) hasn’t been stolen.
Support the site! Enjoy the news & guides we provide? Help us keep bringing you the news. Pelo Buddy is completely free, but you can help support the site with a one-time or monthly donation that will go to our writers, editors, and more. Find out more details here.
Get Our Newsletter Want to be sure to never miss any Peloton news? Sign up for our newsletter and get all the latest Peloton updates & Peloton rumors sent directly to your inbox.
Chris Lewis
Chris Lewis is the creator & founder of Pelo Buddy. He purchased his Peloton in 2018, and uses all the different devices: Peloton Bike, Tread, Row, and Guide. He has been involved in the fitness industry for more than a decade – previously co-founding the websites Mud Run Guide & Ninja Guide. You can find him on the leaderboard at #PeloBuddy.
