BBB: scam uses BBB email address

BUFFALO, N.Y. (WIVB) - RELEASE: A new email phishing scam targeting business people is using a BBB.org email address. Many target accountants and use the American Institute of CPAs logo and name. Businesses and consumers across the country are reporting this new round of phishing email scams using the BBB name and email address.

This latest scam uses a BBB.org email address, some in conjunction with the American Institute of CPAs logo and name. The message informs recipients that their CPA license is being terminated due to tax fraud allegations and encourages them to click on a link and reply to the charges. The link leads to a third party website that downloads a virus on to the recipient’s computer.

While this email scam primarily targets accountants, BBB has gotten reports of other professionals receiving the emails.

---

Sample email:

From: BBB [mailto:alerts@bbb.org]
Subject: BBB important information

 

Hello,

Here with the Better Business Bureau would like to inform you that we have been sent a complaint (ID 05038834) from a customer of yours in regard to their dealership with you.

Please open the COMPLAINT REPORT (link to malicious web site was removed) below to obtain more information on this case and let us know of your position as soon as possible.

 

We are looking forward to hearing from you.

 

Regards,

Katherine Schulte

Dispute Counselor
Better Business Bureau

---

Others Still Circulating

In addition to the new wave of emails, the original version of the email scam is still out there. Recipients are told that a complaint has been filed against their business, and they need to respond by clicking on a link in the email. Again, the link takes them to a third-party website that infects their computer with a virus.

What to Do

Should you receive a suspicious email, don't click on any links. You can test the links by using your mouse to hover over them. The destination of the links will appear in a small pop up box next to the link or at the bottom of the screen. If the email is a scam, the website shown will not be a BBB.org URL.

After you have identified a scam, please forward the email to phishing@council.bbb.org and delete it from your inbox. Also, make sure your virus software is up to date.