Notice - BMA Public Warning - Fraudulent Email Domain: BMA-BM.com used to Misdirect Wire Payment (2025-08-14)

Summary

This is a public warning notice from the Bermuda Monetary Authority alerting regulated entities and the public to a fraud scheme involving a spoofed email domain, @bma-bm.com, used to impersonate the Authority and misdirect wire payments to a fraudulent account styled 'BMA Gulf' in another jurisdiction.

• Genuine domain: Authentic BMA emails will always come from the @bma.bm domain, not @bma-bm.com or similar look-alikes.
• Payment instructions: Official fees and payment instructions are posted on the BMA website; any instruction to send funds to a different institution should be treated as fraudulent.
• Verification: Recipients should verify sender email addresses before acting, avoid opening attachments from suspicious emails, and independently verbally confirm any payment content by calling a known representative or the Authority's main number.
• Reporting queries: Queries about payments to the Authority should be directed to finance-receivables@bma.bm.
• Warning list: The fraudulent domain has been added to the BMA's public warning list of unauthorised entities, and the Authority has acted to have the fraudulent domain suspended.

The notice is informational and intended to raise awareness and deter further fraud; it does not itself create new ongoing regulatory obligations beyond standard vigilance expected of regulated entities when handling payment instructions.

Key obligations

• Regulated entities should verify that any payment or fee instruction purportedly from the BMA matches the official instructions published on the BMA website before making payment.
• Recipients of suspicious emails purporting to be from the BMA should not open attachments and should verbally confirm authenticity by calling a known contact or the BMA's main number rather than using contact details in the suspicious email.

Applies to

regulated entities