We are sharing an important security warning regarding a scam targeting funders, donors, and nonprofit supporters.
Recently, we were notified that more than one of our partner organizations discovered scammers impersonating their leadership and emailing funders with urgent financial requests.
The scam was structured to appear highly authentic:
The scammer referenced specific details about real, past grants, likely sourced from 990s, to build immediate credibility.
The message originated from a fake email domain that was similar to the organization’s actual domain, with subtle differences.
The email signature included a slightly modified version of the organization's official mission statement.
Because these impersonation tactics are becoming increasingly common across the sector, we want to ensure our community stays vigilant.
Recommended Safety Measures
If you receive an unexpected or high-urgency funding request, even from an organization or leader you know personally, please take the following precautions:
Look closely for misspellings, additional characters, or unexpected domain extensions that differ from the official web domain.
Always confirm unexpected emergency appeals by calling a verified staff member or contacting them through an established telephone number or email address already on file. Never use the phone numbers or reply links provided within the email.
Do not click links, attachments, wire money, or submit online payments until you have verified the request's authenticity.
Scammers frequently target the trust and generosity that sustain mission-driven work. Please share this warning with your colleagues, board members, and network partners to help keep our sector secure.
