New York Financial Services Firms Warned of Email Phishing Scam by DFS

The New York State Department of Financial Services (DFS) has issued a warning to both firms and individuals under its regulation regarding the increasing prevalence of phishing emails. These fraudulent messages falsely claim to be from DFS personnel, urging recipients to take various actions such as opening files, making payments, or sharing missing documents to encourage further engagement.
In light of these deceptive practices, DFS emphasizes the importance of scrutinizing email header information. Recipients should pay particular attention to the email address from which the message was sent. Authentic communications from DFS will originate exclusively from the domains [@]dfs.ny.gov or [@]public.govdelivery.com.
It has come to the attention of DFS that some of these phishing emails have been sent from the domain [@]myportal.dfs.ny.gov.cazepost.com. Emails originating from this domain are not legitimate and should be treated with caution.
DFS strongly advises against using any contacts or links provided in these suspicious communications. Instead, firms are encouraged to reach out directly to DFS through their primary point of contact to verify any claims or requests made in such emails.
DFS oversees nearly 4,000 entities, including banks, insurers, credit unions, and other financial services organizations. This broad regulatory scope underscores the importance of vigilance against phishing attempts that could compromise sensitive information or financial security.
Was this article valuable?
Here are more articles you may enjoy.
Interested in Cyber?
Get automatic alerts for this topic.

The New York State Department of Financial Services (DFS) has issued a warning to both firms and individuals under its regulation regarding the increasing prevalence of phishing emails. These fraudulent messages falsely claim to be from DFS personnel, urging recipients to take various actions such as opening files, making payments, or sharing missing documents to encourage further engagement.
In light of these deceptive practices, DFS emphasizes the importance of scrutinizing email header information. Recipients should pay particular attention to the email address from which the message was sent. Authentic communications from DFS will originate exclusively from the domains [@]dfs.ny.gov or [@]public.govdelivery.com.
It has come to the attention of DFS that some of these phishing emails have been sent from the domain [@]myportal.dfs.ny.gov.cazepost.com. Emails originating from this domain are not legitimate and should be treated with caution.
DFS strongly advises against using any contacts or links provided in these suspicious communications. Instead, firms are encouraged to reach out directly to DFS through their primary point of contact to verify any claims or requests made in such emails.
DFS oversees nearly 4,000 entities, including banks, insurers, credit unions, and other financial services organizations. This broad regulatory scope underscores the importance of vigilance against phishing attempts that could compromise sensitive information or financial security.
Was this article valuable?
Here are more articles you may enjoy.
Interested in Cyber?
Get automatic alerts for this topic.
