BEWARE OSHA Phishing Scam Email

Employers should be cautious of an email that has been circulating to numerous employers around the country that appears on its face to be a request from OSHA to download a guidance document about “Safety & Health at U.S.: Protecting Workers and Employers” in order to avoid being fined.

Phishing Scam Email

The email, which is not sent from a Department of Labor (“DOL”) email address, contains a newsletter clipping that has both the DOL and the Department of Health and Human Services (“DHHS”) logos at the top. It claims that the recipient employers have been selected in a database to receive this guidance document, and that they will receive “an unannounced, onsite inspection” to investigate whether they are meeting Safety & Health Requirements.

OSHA has confirmed that this email was not sent by the Agency.  Employers should NOT click on any of the links in the email, should immediately delete it, and should run a virus scan.  It is believed to be a phishing scam similar to ones that have plagued employers in the past.  OSHA states that it will investigate and potentially refer the matter to the Department of Justice for a criminal investigation.

Using OSHA as a front to trick employers has been a ploy scam artists have used in the past. For example, on June 5, 2016 , the Federal Trade Commission charged a Florida man and his company with deceiving employers to the tune of approximately $1.3M by pretending to be an OSHA representative, and threatening to shut down small businesses and/or fine them unless they purchased from him OSHA and other regulatory posters for their workplaces.  Using names that sounded like the Occupational Safety and Health Administration, such as “Occupational Safety and Compliance Administration,” “US Corporate Compliance Office” and “Occupational Compliance and Safety Administration,” the man would tell the businesses that they are not complying with federal law and that the government upon inspection will shut down or fine the business unless the owner immediately purchases regulatory posters costing approx. $200 each.  After paying for the posters, victims of the scam discovered that they were dealing with a company – not the government, and that OSHA provides the same regulatory posters for free.  Employers that called the company for refunds would only reach voicemail and their calls were never returned.  A temporary restraining order has been entered by a Judge in the U.S. District Court for the Middle District of Florida while the FTC seeks to recover refunds for victims of the scam.

Employers should always remember that OSHA never requests money over the phone or on-site at the close of an inspection, it never charges employers for posters or regulatory guidance, and its representatives are obliged to present their credentials upon request.  In order to avoid falling victim to one of these scams, here are a few practice pointers to keep in mind:

  1. If an employer receives an email requesting money or threatening an inspection, do not click on any links, and immediately contact your local OSHA area office to validate the authenticity of the email.
  2. If an employer receives a phone call from a supposed inspector requesting money or threatening an inspection, ask this person for their name and identifying credential number, and call your local area office to verify whether the individual is a representative of OSHA and has business with your company.
  3. If an employer receives a visit from a person representing that he is at the worksite on behalf of OSHA to conduct an on-site inspection, ask for his credentials, get a photocopy of the person’s business card, and call the local area office to confirm their identity and purpose of the visit.  If the person refuses these requests, call the police.
  4. Do not write a check or give money to any person claiming to be an OSHA Officer or Inspector under any circumstances. Certified Health & Safety Officers do not collect fines for OSHA.  If the “inspector” insists, call the police for assistance.
  5. If you have any doubts about the substance of an email or a phone call from what appears to be OSHA or the veracity of an inspector at your worksite, call your nearest local OSHA area office to verify the content of the communication.

2 thoughts on “BEWARE OSHA Phishing Scam Email

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s