Connecticut Businesses Being Warned Of Phishing Emails Posing As State Registry

HARTFORD, CT — Connecticut Secretary of the State Stephanie Thomas is warning businesses across the state about a phishing email campaign that falsely claims to come from the Connecticut Business Registry.

According to the Secretary of the State's Office, the fraudulent email contains a malicious DottedSign link that asks recipients to view and sign a digital document. Officials said the tactic is designed to trick users into revealing sensitive information, such as login credentials, authorizing money transfers or downloading malware.

Subscribe

"Cybercriminals are getting more sophisticated, and it's critical that businesses stay alert," Thomas said in a statement. "Our office will never send unsolicited documents for signature. If something feels off, trust your instincts and verify before you click."

The office said it cannot prevent phishing attempts but urged businesses to remain vigilant and verify the source of any suspicious communications.

Officials said legitimate emails from the Secretary of the State's Office will always originate from an "@ct.gov" email address. Businesses should inspect the sender's full email address rather than relying on the display name and be wary of lookalike domains, such as addresses with minor spelling changes intended to mimic official state accounts.

The office also advised businesses not to respond to suspicious emails or click embedded links. Instead, business owners should access the state's online business filing system by navigating directly to the official Connecticut business portal and logging into their account.

Officials also recommended that businesses never share their login credentials and enable multi-factor authentication to help protect their accounts.

Businesses that have questions about whether a communication from the Secretary of the State's Office is legitimate are encouraged to contact the agency's Business Services Division before responding.