Notices to Members

2021 | 2020 | 2019 | 2018 | 2017 | Show more years

Notice I-21-17

June 01, 2021

NFA warns of fraudulent phishing emails purporting to be from NFA

NFA has learned of an ongoing phishing campaign that involves fraudulent emails purporting to be from NFA staff, including Kathleen Clapper and Joe Hawrysz (see Sample Phishing Email below). Other staff member names may be used as well. These emails have a source domain name "@nfa-futures.com" and may include an attachment.

The domain of "@nfa-futures.com" is not connected to NFA. Firms should not open any attachments from this domain and should delete all emails originating from this domain.

NFA reminds all Members to be vigilant when it comes to email requests. All legitimate emails from NFA will come from an address ending in @nfa.futures.org, nfanotifications@mailer.nfa.org or @nfa-swaps-proficiency-requirements.moonami.com in the case of NFA's Swaps Proficiency Requirements. Always be sure to scrutinize the sender's address.

In general, Members should not trust unsolicited emails, especially emails that ask for personal or financial information. With any email, Members should verify the sender prior to responding and ensure the validity of links or attachments prior to clicking on them.

If you have any questions on this Notice, please contact NFA's Information Center (312-781-1410 or 800-621-3570 or information@nfa.futures.org).


Sample Phishing Email

Subject: [FIRM NAME] - NFA

Dear [INDIVIDUAL NAME],

I hope you're doing well. Following regulatory requirements, the National Futures Association (NFA) has released new information to its members.

Please see the letter above and update your files using the information in section 1 & 2A.

Let me know if you have any questions.

Thank you,
Joseph

Respectfully,

Joseph Hawrysz
Managing Director, Compliance
National Futures Association
One New York Plaza, #4300
New York, NY 10004
Cell: [(XXX) XXX-XXXX]

Subscribe to NFA Email Communications