FRAUD ALERT: NIPR Phishing Email

The National Insurance Producer Registry (NIPR) has announced that NIPR clients are receiving an email that appears to be, but is not, from them.

Here’s what you need to know to stay safe.

What Does the NIPR Phishing Email Look Like?

The current NIPR email scam involves emails alerting insurance agents to past due invoices. They may look like they’re sent out from NIPR’s domains: @nipr.com, @naic.org, or @stripe.

Agents state that email urges them to pay the bill right away and has elements from NIPR’s official site.

How Can I Verify If a NIPR Email Is Authentic?

If you receive a suspicious email from NIPR, do not open any attachments, click on any links, or submit payment.

Please contact NIPR directly at [email protected] to check if a bill is due.

Staying Safe from Phishing Emails

Criminals design phishing emails to appear to be from a recognized sender at first glance (e.g., coworker, trusted brand). Their goal is to steal sensitive information (e.g., personal data like credit card numbers or passwords) from those who open the emails.

Usually, there are a few ways you can spot a phishing email:

• Sender’s email address: While the email address may closely resemble the legitimate sender’s, try clicking on the domain name to uncover the fake domain and true sender.
• Generic greetings: The email may begin with something like “Dear Customer” instead of your actual name or customer ID because the criminal doesn’t have this information yet.
• Grammar/writing faux paus: Spelling mistakes, strange wording or sentences, or phrasing trying to get you to act unnecessarily quickly are telltale signs something may be off.
• Suspicious links: Hover (do not click) on links with your mouse to reveal the actual URL. If it is way different than expected and/or contains a series of weird characters, it’s almost definitely a phishing email.

It’s important to look for signs of phishing with any email you receive. Anytime you are unsure if an email is truly from the sender you think it is, we highly recommend calling or emailing the individual or organization directly to confirm its accuracy with contact information you already know to be safe.

NIPR is working hard to resolve the issue and stop these emails. For now, agents should be aware of the scam and extra cautious when reviewing NIPR communication.

For more information, contact NIPR.