Beware of phishing e-mails

Based on numerous reports from our business partners, we have discovered a growing number of scam e-mails sent under the signature of IGM Nástroje a stroje s.r.o. and its management.

Please note that our company or any employee HAVE NEVER SENT AND WILL NEVER SEND any form of correspondence requesting funding, financial assistance or any other request concerning financial matters.

Most of these e-mails appear to be sent from official e-mail addresses with our domain (e.g. igm.cz, igmtools.com). However, they have a spoofed e-mail address that is intended to look legitimate. The sender’s name is usually visible, e.g. Ivo Mlej, but the hidden e-mail address is ceo@phamartechnique.net.

These e-mails often encourage further communication by e-mail and chat or ask to withhold payments until further instructions. Again, we will NEVER ask you to do such things, especially not by e-mail.

Below find examples of scam e-mails:

If you are unsure whether you received one of these scam e-mails, always check the legitimacy of the e-mail by contacting our sales department as soon as possible. Never reply to these e-mails, do not click on any links or attachments included in such e-mails.

• Whether it is an e-mail under the signature of our company or your other business partners, always check the sender’s name and e-mail address when you receive a suspicious request to resolve financial matters. Please check the e-mail header and the sender’s address before sending any reply, because the sender’s address may differ from the recipient's address.
• Look for subtle details in the domain, typos, swapped words etc. The address may look legitimate but it is incorrect, for example @img.cz instead of @igm.cz.
• Look for grammar mistakes, missing diacritics, typos and inaccuracies in the text and signature. Scammers often use automatic translators that tend to be incorrect.
• Do not be tricked into the illusion of time pressure. Scam e-mails often try to exert pressure and give you the impression that something needs to be done immediately. Whenever you get a similar feeling from an e-mail, pause and take a moment to consider whether it is a scam.
• Never click on any links or attachments included in the e-mail. They usually contain malware meant to steal personal data, bank account access and other important information. The same applies to any kind of icons, buttons and images.

Unfortunately, we cannot control the distribution of these scam e-mails. For this reason, we kindly ask you to have your e-mail security verified by your e-mail server administrator, in particular the following:

• SPF record check – helps fight spam e-mails by checking whether an e-mail with a specific sender’s domain originates from servers verified by the sender to send e-mails.
• DKIM record check – a method using encryption to reliably verify that an e-mail, including its contents, was sent from a domain.