NIPR Warns Agents of Email Phishing Attempts

Beware, agents. That email from the National Insurance Producers Registry may not be legit.

NIPR said it has learned of an active phishing email campaign referencing past-due invoices. The emails may look like they are from trusted sources such as @nipr.com, @naic.org, or @stipe but they are fraudulent and insurance agents are urged to use caution.

Agents should not open any attachments, click links, or send payments if they receive an email asking for payment. Contact NIPR before taking action at niprbillingdept@nipr.com.

“The emails impersonate NIPR and request payment. Agents should be aware of any unexpected or unsolicited invoices received, and these should be treated as suspicious,” said NIPR, adding that it and the National Association of Insurance Commissioners (NAIC) are investigating and monitoring the phishing activity. A notification was sent to all insurance commissioners, who have been spreading the word on their websites.

NIPR said to look for the following to identify an email phishing attempt:

• Sender’s email address: Fraudulent email addresses can impersonate real addresses
• Generic greetings: May begin with “Dear Customer” instead of personal information
• Tone and grammar: Spelling mistakes, unusual phrasing, and a sense of urgency can all be signs of a fraudulent email
• Hover over links (don’t click): This reveals the URL and can help determine if it is legitimate

Topics Cyber Agencies