Security Alert: Phishing Emails Impersonating WONCA Leaders

Security Alert: Phishing Emails Impersonating WONCA Leaders

WONCA is aware of a number of recent phishing attempts in which individuals are impersonating WONCA officers and other members of our leadership.

The fraudulent messages we have seen typically create an urgent personal situation — for example involving travel, illness, an airport problem or another emergency — and then ask the recipient to contact an unfamiliar telephone or WhatsApp number, provide assistance, or transfer money. Some messages have requested payment through money-transfer services and promised reimbursement later.

Please remain vigilant.

• Always check the actual sender email address, not only the displayed name.

• Be particularly cautious when a message claiming to come from a WONCA officer arrives from an unfamiliar or free personal email account.

• Treat unexpected requests for money, financial assistance, transfers, gift cards, passwords or personal information as suspicious.

• Do not reply, call numbers provided, click links, open attachments, provide information, or make payments in response to a suspicious message.

• If an unusual or urgent request appears to come from a WONCA colleague, verify it independently using contact details you already know and trust.

Report suspicious messages

Please report suspicious emails as phishing before deleting them.

• Outlook: select the message and choose Report → Report phishing. In some versions, this option may appear under the three dots (…).

• Gmail: open the message, click the three dots (⋮) next to the Reply button, and select Report phishing.

Reporting helps email providers identify and block similar fraudulent messages.

Not sure whether a WONCA message is genuine?

If you are uncertain whether a message relating to WONCA is legitimate, please contact the WONCA Secretariat through your usual contact details. We will be happy to verify it with you.

Please do not use contact details, telephone numbers or links contained in the suspicious message itself.

If you have already replied, clicked a link, opened an attachment, transferred funds, or provided information, please contact your organisation’s IT support immediately.

We encourage members and partners to share this alert with colleagues who may also be targeted.