Statement Regarding Phishing Attacks Impersonating NUFDI Staff

NUFDI hereby informs the public that targeted phishing attacks have recently been carried out against certain individuals. In these attacks, malicious actors—impersonating NUFDI and the identities of its staff—have sent messages and emails intended to deceive recipients, steal personal information, and gain unauthorized access to user accounts.

The only official NUFDI domain is nufdiran.org. No other domain, website, or email address holds any official standing in NUFDI's name. Any message, email, or request sent from a domain other than the official domain in the name of NUFDI or its staff is invalid and void, and NUFDI bears no responsibility for it.

All recipients are advised to:

• Carefully verify the sender's domain before taking any action; look-alike but fraudulent domains are the most common method used in these attacks.

• Not click on links contained in suspicious messages and not open their attachments.

• Never enter your password, two-factor verification code, or personal information in response to such messages.

If you have received a message claiming to be from NUFDI and are suspicious of it, verify its authenticity before taking any action by contacting our official email: info@nufdiran.org