Fraudulent Phishing Email (2024-10-30)

Summary

This is a public notice issued by the Cayman Islands Monetary Authority (CIMA) alerting the public to a phishing scam in which fraudulent emails purporting to be from CIMA are being circulated. The fraudulent emails claim to originate from a person named Garth MacDonald using an email address on the domain 'cima-ky.com', which CIMA confirms is not a legitimate CIMA domain. CIMA states that all genuine CIMA emails end in '@cima.ky' and warns that other fraudulent domains may also be used in this campaign.

• No breach: CIMA's own network and systems have not been compromised and there has been no security breach; the phishing campaign is an external impersonation attempt.
• Advice to recipients: CIMA advises recipients not to click on links or attachments in suspicious emails and to remain vigilant, particularly given the ongoing nature of the campaign.
• Nature of notice: This notice is informational rather than regulatory in nature and does not impose compliance obligations on licensees or regulated entities.
• Reporting request: Members of the public and industry are asked to report any suspicious emails resembling this phishing attempt to CIMA's public relations contact address.

Key obligations

• Report any suspicious emails purporting to be from CIMA to ContactPublicRelations@cima.ky
• Avoid clicking on links or attachments in emails from the 'cima-ky.com' domain or other domains not ending in '@cima.ky'