New sign-in notifications

Overview

Ramp monitors sign-in activity on your account and sends you an email notification when it detects a sign-in from an unrecognized device, browser, or location. These notifications are always on and cannot be disabled. They help you spot unauthorized access quickly and take action to protect your account.

Sign-in notifications are triggered only for password and Google OAuth sign-ins. They are not sent for SAML SSO, passkey, or email OTP sign-ins.

What's included in the notification

The notification email is sent from [email protected] with the subject line Ramp sign-in alert. It includes the following details about the sign-in:

• Device description (e.g., "Chrome on macOS")
• IP address
• IP location (city, region, and country)
• ISP (internet service provider tied to the IP address, or VPN service where applicable)
• Sign-in method ("Google" or "Password")
• Date and time of the session

The email also includes a link to protect your account if you don't recognize the sign-in. This link is valid for 48 hours.

When you receive this notification

Ramp sends this notification when it detects a sign-in from a device or location it doesn't recognize. This can happen when:

• You sign in from a new device or browser
• Your IP address hasn't been seen in the past 30 days
• Your device fingerprint hasn't been seen in the past 90 days

New accounts are exempt from these notifications during their first few sign-ins. Only password and Google OAuth sign-ins trigger notifications — if you sign in through SAML SSO, a passkey, or email OTP, you won't receive one.

If you recognize the sign-in

If you recognize the device, location, and time in the notification, no action is needed. You can safely ignore the email.

If you don't recognize the sign-in

If you don't recognize the sign-in details, take action immediately:

1. Click the link in the email. The link takes you to an account protection page where you can secure your account. This link expires after 48 hours.
2. Choose an action on the account protection page:

• Password users: Select Sign out and reset password (recommended). This signs out all active sessions across all your devices and sends you a password reset email.
• Google users: Select Sign out everywhere . This signs out all active sessions. Since your password is managed by Google, reset it through your Google account if needed.

3. Review your account for unauthorized changes , such as changes to your settings or unusual transactions.
4. Contact Support if you find suspicious activity. If anything looks wrong, contact Ramp's Support team to report it.

Why you might receive this unexpectedly

Some privacy features and network configurations can make Ramp's detection treat a familiar sign-in as unrecognized. Common causes include:

• Incognito or private browsing — prevents Ramp from recognizing your browser
• Cleared cookies — removes the "Trust this device" token Ramp uses to identify returning browsers
• VPN or proxy — changes your apparent IP address and location
• Apple Private Relay or Google Fi VPN — routes your traffic through different IP addresses, which can make your location appear unfamiliar. The notification's ISP field should show the service you're using.
• Corporate VPN — your company's VPN may route internet traffic through IP addresses in different regions. Check with your IT team if the IP in the notification matches your company's VPN.
• New device or browser — signing in from a device or browser you haven't used with Ramp before

If the notification details match your activity and the device, browser, and time look correct, no action is needed.

Frequently asked questions

Can I turn off these notifications?

No. Sign-in notifications are an always-on security feature and cannot be disabled.

I use SSO — will I get these?

Only if you also sign in with Google OAuth. SAML SSO and passkey sign-ins do not trigger sign-in notifications.

How long is the link in the email valid?

The account protection link expires after 48 hours. If it has expired, go to app.ramp.com and sign in to reset your password directly.

Does "Sign out and reset password" sign out all my devices?

Yes. Both "Sign out and reset password" and "Sign out everywhere" revoke all active sessions across all your devices.

I got this notification but I was using a VPN — is that normal?

Yes. VPNs change your apparent IP address and location, which can make Ramp treat the sign-in as unrecognized. If the other details (device, browser, time) match your activity, you can safely ignore the notification.

I'm still concerned about my account security

If you've taken the steps above and still have concerns, contact Ramp's Support team for further assistance. You can also review Troubleshooting Ramp sign-in & MFA issues for additional guidance.