State Bar Phishing Scam Updates

Jun 27, 2025

It has come to our attention that fraudulent emails impersonating members of the South Carolina Bar Board of Governors, including Secretary Brad Richardson, have been sent to some members. These emails are designed to appear legitimate and may use real names and titles of SC Bar leadership or staff.

Key Characteristics of the Scam:

  • Sender Spoofing: The emails may come from deceptive addresses such as janedoe@scbar.org.virrumail.com. Please note: legitimate SC Bar email addresses end with @scbar.org. Any address including .virrumail.com is fraudulent.
  • Vague or Misleading Language: Messages may reference secure communications or document requests without providing clear context.
  • Urgent Tone: The emails often attempt to create a sense of urgency to prompt immediate action without proper verification.

What You Should Do:

 

·         Do not reply, click on links, or open any attachments from suspicious emails.

·         Verify the sender’s full email address and assess whether the tone matches the sender’s usual communication style.

·         Report the email immediately to your organization’s IT department or MSP.

·         Be extra cautious with emails referencing secure communications or urgent requests, especially during times of leadership transition.

If you receive a suspicious message, please do not engage with the sender. Your vigilance helps protect the integrity of our communications and the security of our members.

It has come to our attention that some members have received fraudulent emails claiming to offer discounted hotel room blocks for the 2026 South Carolina Bar Convention in Savannah, GA.

These emails are not legitimate and are not affiliated with the South Carolina Bar. One such message comes from an address like Reservation@expo-key.com and includes suspicious booking offers for hotels near the convention center.

Please do not click any links, reply to the sender, or open any attachments.

Red Flags in the Scam Email:

  • Claims of "last block of rooms" to create urgency.
  • Unofficial sender email (e.g., @expo-key.com or @TravelBookingLight.com).
  • Poor grammar and formatting (e.g., "From 22 to 25 Jan at Savannah Convention Center").
  • Use of non-hotel-related platforms for booking.
  • Promises of flexible cancellation and group discounts to lure recipients

What You Should Know:

  • The South Carolina Bar does not use third-party booking agencies.
  • All official hotel information will come directly from the South Carolina Bar via our verified communication channels.

What You Should Do:

  • Do not reply, click on links, or open any attachments from suspicious emails.
  • Report the email immediately to your organization's IT department or MSP.
  • Be extra cautious with emails that lack branding, contain grammatical errors, or use urgent language - these are common signs of scams pretending to be third-party booking agencies.

If you receive a suspicious message, please do not engage with the sender. Your vigilance helps protect the integrity of our communications and the security of our members.

Back to News