We have just been informed that fraudulent emails are being sent to individuals, falsely claiming to be sent by Opus Energy.
The design of these emails very closely matches Opus Energy’s email templates, and the email address that they appear to be sent from has also been spoofed, making it hard for the recipient to tell the difference.
These emails are being sent to both customers and non-customers alike, and are not the result of a data breach. This is a type of email scam called ‘phishing’, which tries to obtain personal or sensitive information by getting the recipient to click on bogus links or download files from emails.
How do you spot the difference?
Although on first glance the two emails appear to be identical, this isn’t the case. Here’s what you need to look out for:
- Subject line: The subject line on a genuine email will always include your Opus Energy Account ID. This is not present in the spoof email.
- Pink button: The pink button on a genuine email always says ‘View my invoice’. The spoof email is asking you to ‘Download invoice’, instead.
- Email text: The first line of text in a genuine email always includes your Opus Energy account number. This is absent in the spoof email.
What to do next
If you have received this email yourself, please DO NOT click on any links in the email. You may also want to report the fraudulent email to Action Fraud either on their website at http://www.actionfraud.police.uk/ or by phone at 0300 123 2040.