New guidance on verifying communications claiming to be from OFSI 

OFSI has published new guidance on how to verify whether communications claiming to be from OFSI are genuine. 

The guidance provides information to help individuals verify communications claiming to be from OFSI, including signs that a communication may not be genuine and sets out what to do if you are unsure. 

The guidance:

Check if an email or communication claiming to be from OFSI is genuine

OFSI will never ask you to make a payment, transfer cryptocurrency, pay a fee to obtain a licence, or pay to release frozen funds. 

1.  I’ve received a suspicious email or communication claiming to be from OFSI. What should I do? 

If you receive a suspicious communication claiming to be from OFSI, HM Treasury or another government body: 

• do not reply 
• do not click any links or open attachments 
• do not make any payments 
• do not use the contact details they have provided 

Instead, use the official contact details published on GOV.UK. If you’re unsure if a communication is genuine, contact OFSI directly at ofsi@hmtreasury.gov.ukimmediately. 

2. How to check if an OFSI email or letter is genuine  

Official OFSI emails are sent from: 

• ofsi@hmtreasury.gov.uk 

Official UK government email addresses end in ‘gov.uk’. Always check the full email address carefully. 

Scammers may use email addresses or display names that appear to come from a UK government department. 

They may also use official-looking documents, branding, formatting or language to make communications appear genuine. A professional-looking email or letter does not mean it is authentic. 

3. Does OFSI contact people by text message or WhatsApp? 

No, OFSI will never contact you via: 

• Text message  
• WhatsApp 

If you receive a message claiming to be from OFSI through these channels, you should treat it as suspicious.  

4.  Signs an OFSI communication may be a scam 

Be cautious if a communication claiming to be from OFSI: 

• Asks you to pay a fee for an OFSI licence application. Applications for OFSI licences are made through the official GOV.UK website and there is no charge to apply for a licence   
• Asks you to send or transfer money, cryptocurrency, or make a payment to unfreeze funds or release assets. OFSI does not require individuals to transfer money or cryptocurrency to obtain a licence, release frozen funds or assets, avoid enforcement action, or verify compliance with UK financial sanctions. Funds are frozen by relevant persons, such as banks, in accordance with UK sanctions legislation. Payment to OFSI, a bank or a third party will not unfreeze funds. 
• Asks you to provide personal, banking or financial information. Genuine OFSI communications will not ask you to provide sensitive financial information or security credentials unexpectedly. If you are unsure whether a communication is genuine, contact OFSI directly using the contact details published on GOV.UK.  
• Pressure you to make an immediate payment to avoid fines, penalties or other consequences. Communications that demand urgent payment or threaten enforcement action if you do not pay should be treated with caution. 

5.  Report a scam or phishing email 

If you believe you have received a scam or phishing email claiming to be from OFSI, you can report it to the National Cyber Security Centre.

If you’ve been a victim of a scam, suffered financial loss or responded to a scam communication, report it to Report Fraud through their website or to Police Scotland by calling 101 if you live in Scotland.  

You can report fraud to Report Fraud if you are in the UK, if the fraud occurred in the UK or if the fraud is related to the UK and the internet. Report Fraud also provides information on reporting fraud in a range of languages and guidance for people who may need support accessing its services. 

If you live outside the UK, you can also report it to your local law enforcement agency or the relevant fraud reporting authority in your country.