New Email Scam Targets Small Businesses

State officials are warning of a new phishing email scam targeting small businesses.

The scam impersonates the Office of the Secretary of State’s Business Services Division in an apparent attempt to steal sensitive information or install malicious software.

The email uses the subject line “RE: Connecticut Office of the Secretary of the State, Business Services Division.”

Businesses should not respond to the email—which claims that a secure document has been shared with the recipient—nor open its attachments.

The email instructs users to download an attached file and enter a provided access code to unlock the document through a purported “DocuSafe Secure Portal.”

Verification

“Cybercriminals are getting more sophisticated, and it’s critical that businesses stay alert,” Secretary Thomas said in a statement.

“If something feels off, trust your instincts and verify before you click.” 

Thomas urged businesses to verify email addresses, noting that emails from her office will always come from a @ct.gov address.

She also warned that hackers use spoofing or masking techniques, adopting similar-looking addresses—such as @cct.gov or @ct-gov.org—to deceive recipients.

All official business filings with the state can be managed through the Connecticut Business Services website.

For additional support, businesses can email the Business Services Division.