The Office of Guam Homeland Security and the Office of Civil Defense were made aware that the Office of Technology, along with the Mariana Regional Fusion Center, received reports of a purported phishing email attempting to get users to click on a link for documents.

The email is seemingly a scam and attempts to get the user to engage further.

Phishing emails often masquerade as internal IT requests, payroll updates, or urgent "unpaid invoice" notices.

Before engaging with any email, perform these checks:

Verify the Sender: Look closely at the "From" field. Scammers often use domain spoofing (e.g., @g00g1e.com instead of @google.com) or display names that don't match the actual email address.
Analyze the Tone: Be wary of messages that create a sense of unnecessary panic. Phrases like "Your account will be deactivated in 1 hour" or "Unauthorized login attempt—click here now" are classic red flags.
Check the Destination: Do not click. Hover your cursor over any buttons or links to preview the URL.If the address looks like a string of random characters or points to an unfamiliar domain, do not click.

If you receive an email that feels "off," please follow these steps:

Do Not Click: Do not click links, open attachments, or reply to the sender.
Report It: Use the "Report Phishing" button in your email client. For Government of Guam agencies, refer to OTECH’s website, https://otech.guam.gov/.
Delete: Once reported, delete the email from your inbox and your trash folder. Reminder: OTECH will never ask you to provide your password or MFA codes via email or chat.

The community is also advised to report any suspicious activity relating to the subject to the MRFC at (671) 475-0400 or via email at mrfc@ghs.guam.gov, following the Department of Homeland Security’s campaign, “If You See Something, Say Something.”

Your report may help law enforcement identify the people behind scam messages and illegal calls.