Podcast Center
Video Center
Webcasts
Resource Center
Events
By 
May 04, 2020 at 04:50 PM
The Financial Industry Regulatory Authority warned broker-dealers Monday of phishing emails that purport to be from the self-regulator.
In Regulatory Notice 20-12, FINRA states that the scam is “a widespread, ongoing phishing campaign that involves fraudulent emails” that claim to be from FINRA officers, including Bill Wollman and Josh Drobnyk.
The emails have a source domain name “@broker-finra.org” and request immediate attention to an attachment relating to a broker-dealer firm.
The domain of broker-finra.org is not connected to FINRA and firms should delete all emails originating from this domain name, FINRA states. Also, FINRA has requested that the internet domain registrar suspend services for broker-finra.org.
“In at least in some cases, the emails do not actually include the attachment, in which case they may be attempting to gain the recipient’s trust so that a follow-up email can be sent with an infected attachment or link, or a request for confidential firm information,” FINRA explains. “In other cases, what appears to be an attached PDF file may direct the user to a website which prompts the user to enter their Microsoft Office or SharePoint password.”
