The New Jersey Real Estate Commission (REC) is aware of a recent phishing email targeting licensees. The perpetrators are using personalized subject lines and file names lending false authenticity to the messages; however, these messages are not being sent by the REC or authorized representatives of the REC. Phishing emails often use similar lures, in which the communication references a document, a message, a report, or a file claiming to need review. Once the user clicks the included link in the email or attachment, they are often directed to a website that requests account credentials to review the document or sometimes exploit the user’s local computer access rights to perform installations that are otherwise unauthorized. If account credentials are entered, they are stolen by the threat actors.

If you receive an unexpected email from the REC and need to verify its authenticity, please call 609-292-7272. Otherwise, follow the below general tips on avoiding phishing email scams.

Note:
The example email below shows:
	1.	A sender’s email address associated with a domain name that is not affiliated with the New Jersey Real Estate Commission.
	2.	An unauthorized reproduction of the Official Seal of the State of New Jersey in an apparent attempt to mislead recipients into believing the communication is legitimate.
	3.	The inclusion of familiar contact information to create a false level of comfort around the authenticity of the message.