Japanese authorities are issuing a stern warning to businesses nationwide about a sophisticated phishing scam. Emails, falsely claiming to be from company presidents, are instructing employees to create new chat groups on the messaging app Line and share their QR codes. Police fear this could be a precursor to significant financial fraud.
Key Takeaways
- Scammers are impersonating company presidents via email.
- The emails request QR codes for new Line chat groups.
- Police warn this could lead to monetary theft.
- Employees are advised not to comply and to report suspicious emails.
The Scam Unfolds
Companies across Japan have reported receiving deceptive emails since mid-December. These messages, appearing to originate from their respective CEOs, instruct employees to promptly create a new Line group for business purposes and provide its QR code. However, the email addresses used in these communications are not affiliated with the legitimate companies, a key indicator of a fraudulent attempt.
While no financial losses have been confirmed to date, the Yamanashi Prefectural Police are concerned that these incidents could escalate into full-blown fraud schemes, potentially involving the theft of money through the Line platform.
Nationwide Concern and Advice
The Information-technology Promotion Agency, Japan (IPA), an organization that assists companies with cybersecurity, has received 31 inquiries regarding similar emails as of January 6th. In two reported cases, employees did send QR codes. Fortunately, they became suspicious during subsequent interactions and ceased communication before any financial demands were made.
The IPA believes scammers are likely obtaining company president names from public websites and then acquiring employee email addresses through various means to send these fraudulent messages in bulk. The attacks appear to be widespread, targeting companies across different regions and industries without a discernible pattern.
To combat this growing threat, the IPA strongly advises employees to exercise extreme caution. "If you receive such an email, do not send the QR code and consult your company’s security representative," an official stated.