FMCSA imposter alert! Don’t get hooked on the latest phishing attack
Someone pretending to be from the Federal Motor Carrier Safety Administration (FMCSA) is sending fake emails to registered entities. This is a convincing-looking phishing attack, and you should not take any of the actions requested in the email(s).
The fake email, coming from either safety@fmcsa.gov or filing@fmcsa.gov, may contain the following information:
- A request that readers complete an attached form,
- A request for readers to provide a certificate of insurance and driver’s license to “protect against fraud,” and
- A threat that not responding within a day will result in a fine.
If you reply to the email, the response goes to @fmcsa-safety-fmcsa.com. None of these email addresses are legitimate or owned by the FMCSA.
How to avoid phishing attacks
Anything suspicious should be verified by recipients before taking any action, including emails appearing legitimate by ending with a “.gov,”. Actual information requests from the FMCSA will direct readers to log in to their portal accounts through https://portal.fmcsa.dot.gov/login or the request will come directly from an FMCSA mailbox.
If you ever receive a suspicious email, phone call, or other communication, contact either your regional FMCSA office or FMCSA’s Headquarters via phone at (800) 832-5660.