Scam Alert: Fake BBB Email

  
     
September 11, 2017

The BBB of Greater Kansas City is issuing a warning to area businesses about an email containing financial information-targeting malware. The email tells businesses that a complaint has been filed against them with the BBB.

BBB has obtained copies of the scam email.

  • It is not sent from a bbb.org email account. It usually comes from a roadrunner account, which the BBB does not use.
  • The email asks the recipient to download the complaint by clicking a bit.ly link. The BBB does not use bit.ly links when contacting businesses about complaints.
  • The email accuses businesses of violating labor laws, but the BBB does not handle complaints about labor disputes. We only handle customer complaints.
  • The email demands businesses repond within 48 hours. The BBB gives businesses 10 business days to repond to complaints.

This is not the first time a phishing email tried to use the BBB's legitimacy against its intended victims. Phishing emails frequently use respected businesses or institutions to convince people to trust them. Research has shown that people are more likely to follow the lead of credible sources. But source credibility can be faked. Scammers will often claim to be the FBI, the U.S. Treasury or the Department of Homeland Security to convince victims to do what they say.

Despite using the BBB name, the phishing email is no different from any other phishing email. People should follow the same steps they would if verifying any email.

  • Make sure the email address matches the website of the supposed sender
  • Don't click on any links in an email until the sender's identity is confirmed.
  • If you are not sure whether the email is a scam, go to the website of the supposed sender and call the number on the website. 
  • Call the BBB at 816-421-7800.
  • If you're sure it's a scam, you can report it to the BBB Scamtracker or the FBI at IC3.gov.
  • If you clicked on the link, you should probably change your email passwords and other passwords kept on you computer. Update your virus software and run a scan.

You can learn additional information about Phishing emails in the BBB Tips section.