New Scam Exploits Compliance Requirements

Written by Sue Walsh on September 12, 2008

The folks at the ITSecurity blog are reporting that a new scam hitting the inboxes of IT managers is exploiting the new compliance regulations that have recently gone into affect. The emails and letters are from fake compliance companies that claim the business owes penalties or didn’t file a necessary form. Here’s an excerpt:

One official-looking legal letter came into the controller’s office recently. It was from an “agency” calling itself the Corporate Minutes Compliance Counsel, or somesuch, and it strongly advised (warned, really) that Nolo send the Board a payment of $125 to prepare its state-mandated domestic corporation statement. Failure to do so could result in dire consequences, the letter advised, including a loss of corporate status with the Secretary of State. Nolo’s controller, who has years of experience with real and bogus corporate service solicitations, shredded this letter immediately.

Obviously this is just a spear phishing scam which is designed to get confidential business and financial information from businesses. Any such letters or emails received should be deleted or shredded immediately. If you’re really unsure, contact your secretary of state office or simply look up the company in question

Subscribe to my RSS feed

Leave a Comment

Comment Policy