The Federal Motor Carrier Safety Administration is warning drivers about a recent phishing scam impersonating official FMCSA correspondence.
The email is being sent to entities registered with the FMCSA by someone impersonating the FMCSA through fake emails that appear to be official FMCSA email addresses at first glance. The emails are being sent from [email protected] or [email protected], which are not legitimate FMCSA email addresses and are not affiliated with the FMCSA.
The fake emails contain attached forms that request a SSN and USDOT PIN, and in some instances proof of insurance and a Driver’s License. The email also contains threatening language requiring a response within a day or respondents will be fined.
This is “not an FMCSA practice,” the FMCSA wrote in a statement about the scam. “FMCSA does not require such information on the official FMCSA forms. DO NOT fill out attached forms. Always refer to the official FMCSA forms.”
“This information would also allow the unauthorized party to gain access to your FMCSA account,” the statement from FMCSA continues. “The email containing the link is also very convincing that this is coming from FMCSA. Communications from FMCSA relating to information requests of this type would either request you to log in to your portal account at FMCSA Login (dot.gov) or come directly from an FMCSA dedicated mailbox. While these emails typically end in a “.gov”, we encourage our stakeholders and customers to verify any email or communication they feel to be suspicious with the appropriate agency.”