Notices to Members2022 | 2021 | 2020 | 2019 | 2018 | Show more years
June 01, 2021
NFA warns of fraudulent phishing emails purporting to be from NFA
NFA has learned of an ongoing phishing campaign that involves fraudulent emails purporting to be from NFA staff, including Kathleen Clapper and Joe Hawrysz (see Sample Phishing Email below). Other staff member names may be used as well. These emails have a source domain name "@nfa-futures.com" and may include an attachment.
The domain of "@nfa-futures.com" is not connected to NFA. Firms should not open any attachments from this domain and should delete all emails originating from this domain.
NFA reminds all Members to be vigilant when it comes to email requests. All legitimate emails from NFA will come from an address ending in @nfa.futures.org, firstname.lastname@example.org or @nfa-swaps-proficiency-requirements.moonami.com in the case of NFA's Swaps Proficiency Requirements. Always be sure to scrutinize the sender's address.
In general, Members should not trust unsolicited emails, especially emails that ask for personal or financial information. With any email, Members should verify the sender prior to responding and ensure the validity of links or attachments prior to clicking on them.
If you have any questions on this Notice, please contact NFA's Information Center (312-781-1410 or 800-621-3570 or email@example.com).
Sample Phishing Email
Subject: [FIRM NAME] - NFA
Dear [INDIVIDUAL NAME],
I hope you're doing well. Following regulatory requirements, the National Futures Association (NFA) has released new information to its members.
Please see the letter above and update your files using the information in section 1 & 2A.
Let me know if you have any questions.
Managing Director, Compliance
National Futures Association
One New York Plaza, #4300
New York, NY 10004
Cell: [(XXX) XXX-XXXX]