Fake Expensify / Ramp / Navan expense management subscription payment failed, expense reports cannot be submitted, employee reimbursements on hold, or corporate cards and spend management suspended phishing

Phishing emails impersonating Expensify, Ramp, or Navan claiming the expense management subscription payment has failed, expense reports cannot be submitted, employee reimbursements are on hold, corporate cards are suspended, or spend management is no longer active — directing them to update billing or restore access through a credential-harvesting portal. A distinct attack category targeting expense management and corporate spend platforms used by finance teams and employees to submit and process expense reimbursements. Key facts: (1) Expensify serves 12,000,000+ registered users (10M+ personal + small business, plus millions of corporate users) with a paid subscription tier — Expensify is the most widely adopted expense reporting tool globally; an Expensify subscription suspension means employees across the entire organization cannot submit expense reports, creating an immediate queue of unreimbursed business expenses; finance teams receive immediate organizational pressure from every employee waiting for reimbursement; (2) The 'expense reports cannot be submitted and reimbursements are on hold' hook targets a uniquely cross-organizational pain point: unlike most SaaS billing failures that affect a specific team, expense platform suspensions are felt by every employee simultaneously — the sales rep who spent $800 on a client dinner, the engineer who paid for a conference ticket, and the office manager who bought supplies all discover their expense reports are blocked at the same time; this creates distributed organizational pressure that reaches the finance admin through multiple channels simultaneously; (3) Ramp serves 25,000+ companies ($0-$12/month, corporate cards free with spend-based revenue) as the fastest-growing corporate card and spend management platform — a Ramp subscription suspension simultaneously disables corporate card expense categorization, receipt capture, accounting automation, and policy enforcement across every card in the company; (4) Navan (formerly TripActions) serves 8,000+ companies as the combined business travel booking and expense management platform — Navan suspension simultaneously blocks new travel bookings (no hotels, flights, or rental cars can be booked through the platform) AND expense report submissions, creating a complete business travel and expense blackout; (5) Expensify, Ramp, and Navan credentials expose complete corporate spend data: every employee's expense history, corporate card transaction records, vendor payment data, and travel booking patterns — detailed financial intelligence for competitive analysis or fraud. Warning signs: sender not expensify.com/ramp.com/navan.com; genuine Expensify billing at expensify.com/billing; Ramp billing at app.ramp.com/settings/billing.