Resources to help you navigate the changing regulatory landscape

Imposter Posing as DFPI in Email Phishing Scam

The California Department of Financial Protection and Innovation (DFPI) posted a Consumer Alert on its website concerning an imposter email scam appearing to be from the DFPI Enforcement team.

A California attorney recently reported receiving a suspicious email, appearing to be from the DFPI Enforcement team. The display name showed “enforcement@dfpi.ca.gov,” which is a legitimate DFPI email address. However, the real sender in angled brackets was “dfpi6-admin8kcalifornia@dfpi.gov.anilbodur.com.tr.”

This is not a DFPI email address, and the department did not send this email.

This incident appears to be a case of display name spoofing, a tactic used by phishers to make messages look like they’re coming from a trusted source.

The email claimed the attorney recipient needed to sign documents sent separately. The attorney wisely contacted DFPI through a verified email to confirm. The department confirmed the email sender, listed as “Alia Shahbaz,” is not a DFPI employee.

Consumers and licensees should be extremely cautious when responding to unsolicited emails, especially if the sender requests payments or sensitive personal information.

If you need to contact the DFPI to verify the legitimacy of a communication, use the options on the Contact Us page.

If a credit union member thinks he or she has been scammed, report it to the DFPI. Submit a complaint here or call (866) 275-2677.

For More Information

For more information, email Lisa Quaranta.

Access the ‘Compliance Hotline’

Your League-member benefits include the Compliance Hotline — providing exclusive access to dedicated compliance experts:

Using the above phone number and email address, you can gain access to a knowledgeable team that’s ready to address all your credit union’s compliance inquiries — promptly and efficiently. With the Compliance Hotline, you can proactively respond to impromptu questions and issues by getting clarity and insight on technical topics that normally slow you down. We want to help you unlock the full potential of your League membership by leveraging the resources and support you need to navigate the complex world of compliance effortlessly. We’re ALWAYS just a phone call or email away!

Additionally, other League-member compliance resources include:

  • ViClarity
  • CU PolicyPro
  • ComplySight
  • InfoSight
  • CU Store
  • Record Retention Guide
  • GRC Technology Solutions

For more information, email Lisa Quaranta.

Powered by ViClarity, a California and Nevada Credit Union Leagues company.