Warning: Fake Bid Invitations
A familiar sender does not always mean a safe message.
Phishing campaigns disguised as requests for proposal, tenders, and bid invitations are circulating in the building industry.
These messages can look convincing. They may use the name and branding of a familiar association, business, or partner. Some may even come from a legitimate email account that has been compromised.
Common warning signs include:
- An unexpected RFP, bid, tender, or document-review request
- Pressure to respond within a day or two
- A PDF containing a button or link to review documents
- A link that opens an email login page
- A request to enter your email password after following a link
When in doubt, do not click. Verify the request by contacting the sender through a phone number or email address you already know, rather than replying to the suspicious message. Never enter your email password on a page reached through an unexpected email or PDF.
If something feels off, pause and ask your IT support team to review the message. A quick check can prevent a compromised account and protect your business, colleagues, and industry partners.
Additional Info
Regional Focus : National