May 2017 Update: They are also now sending using the email address email@example.com or firstname.lastname@example.org
Alert notice: Fake employment offers via email purporting to be from Vroon
There has been an increase in phishing emails aimed at seafarers. The purpose of these emails to is both gain information & the trust of the seafarer and scam them into thinking they have been offered a lucrative position with Vroon. At some point during the process they will be asked for payment for "documents" Visa/NI or recruitment fees.
From: sean martin <email@example.com
Subject: SEND ALL SEAMAN DOCUMENTS/CERTIFICATES
Date: Friday, July 22, 2016, 6:10 PM
Company4th Floor Regent Centre
Tel : +442032906048
We are indeed grateful that you have accepted to join us in building the company
more to compete with other shipping company in the world,the Application form filled by you has been filed out for immediate processing.
Please note that we need to take thing step by step because we have other people
applying for the same post and we need to check out all documents very well so please i kindly ask you to provide me with all your seaman Documents/certificate so we can evaluate and have them filed out too for processing of your application,after this step then your contract letter will follow,so we hope that you will be the one to join us but first send me all the documents if you have for security
reason i will advise that you resend again.
Please do send a copy to my official email
for further correspondence : firstname.lastname@example.org
Thank you for your
time and on behalf of me and my team we say Congratulation in advance .
Mr. Sean Martins
Human Resources Department
Tel: + 442032906048
In the above example notice the fake domain name uk-vroonoffshores.com vs the real uk-vroonoffshore.com
Cybersail Assessment - Medium risk
Similar mass mails and offers of fake employment purporting to be from K-line, these use the well known Vroon name.
Since they are contacting seafarers on personal emails, it means that many of these mails will reach the intended recipient due to lack of corporate style security checks.
Note however the formatting of the email is not great, and that genuine shipping companies would not ask fees for recruitment services/visas/national insurance.
- If you are unsure contact directly the shipping company offering the position using the publicly available contact details (Do not use the details on the mail/documents they are to the scammer!)
- The quality of documents and emails will be low resolution graphics
- Genuine shipping companies do not ask for fees/payment
- Check for correct corporate email addresses vs outlook.com/gmail.com/yahoo.com addresses
We have a full article here on how the scam works
Note these emails do not come from Vroon and there is no indication that Vroon systems were compromised in anyway.