Scammers put a colleague's name on an email from an outside address. Check the address, not the name.
One of the most common scams is also one of the simplest. A scammer sets up a free email account, puts your manager's or CEO's name on it, and emails you. In your inbox, it shows their name. Behind the name is an address that has nothing to do with your company.
Signs to look for
- A colleague's name with an outside address behind it, such as a Gmail or Outlook.com account
- An External tag or warning on an email that claims to be from someone inside your organization
- “Are you at your desk?” or “I need a quick favor,” followed by a request for gift cards, a payment or a file
- An excuse for not calling, such as “I'm in a meeting”
What to do
- Select the sender's name in Outlook to see the full address.
- Check with the person by Teams, phone or in person, using details you already have. Don't reply to the email.
- Report it in Outlook using Report > Report phishing.
Already replied or sent something? Call us on 707-755-8000. If money or gift card codes went out, call your bank too.
