The Financial Industry Regulatory Authority warned member firms about a new impostor FINRA website that has an extra “n” in its domain name and could be used by bad actors for a wide range of destructive actions if brokers aren’t careful.
The “finnra.org” domain is “not connected to FINRA and firms should delete all emails originating from this domain name,” it said.
The impostor website looks nearly identical to the actual FINRA site. It contains links to a registration site that is not legitimate, FINRA noted.
It is also “possible bad actors could leverage the domain to send fake emails including those with imbedded phishing links or attachments containing malware,” FINRA warned.
Fraud continued to be a major challenge that broker-dealers faced during the COVID-19 pandemic, with the “biggest potential problem” being phishing attacks, Bill Wollman, an executive vice president at FINRA and head of its office of Financial and Operational Risk Policy, said in May.
In Regulatory Notice 20-12, issued May 4, FINRA warned of “a widespread, ongoing phishing campaign that involved fraudulent emails” that claim to be from FINRA officers. The emails had a source domain name “@broker-finra.org” and requested immediate attention to an attachment relating to a broker-dealer firm. The domain of broker-finra.org was not connected to FINRA and firms should delete all emails originating from this domain name, FINRA stated at the time.
FINRA has now requested that the Internet domain registrar suspend services for “finnra.org,” it said in its Aug. 12 notice.
FINRA also reminded firms to “verify the legitimacy of any suspicious email prior to responding to it, opening any attachments or clicking on any embedded links.”
— Related on ThinkAdvisor: