Phishing Alert: ‘Business Registry’ Email Scam

State officials this week warned businesses about a malicious email that claims to be from the “Connecticut Business Registry.”

The email contains a malicious “DottedSign” link that prompts users to view and sign a digital document.

Secretary of State Stephanie Thomas said this technique tricks users into revealing sensitive information to cybercriminals, which can include login credentials, money transfers, or the download of malware. 

“Cybercriminals are getting more sophisticated, and it’s critical that businesses stay alert,” Thomas said in a July 28 statement.

“Our office will never send unsolicited documents for signature. If something feels off, trust your instincts and verify before you click.”

Verification

Thomas urged business to verify email addresses, noting that emails from her office will always come from a @ct.gov address.

She also warned that hackers use spoofing or masking techniques, adopting similar-looking addresses—such as @cct.gov or @ct-gov.org—to deceive recipients.

All official business filings with the state can be managed through the Connecticut Business Services website.

“If you are suspicious of a link, even in an email from @ct.gov, do not click it,” Thomas said.

“While the Business Services Division may include quick links for convenience, it is never necessary to click a link to make a business filing.”

For additional support, businesses can email the Business Services Division.