Phishing Notice - Security Enhancements

Phishing is a scam used by identity thieves to deceive users into providing their personal information. Identity thieves send authentic-looking emails which impersonate official entities in order to trick users into clicking on a link in the email. The link in the email takes the user to a phishing website which is identical in look and feel to the official entity's website. When the users enter their user names and passwords, the phishing website captures the user names and passwords.

In order to prevent phishing attacks, the Industrial Processing & Power Division (IPPD) has implemented the following changes:

1. All password changes must be completed via CDX. Users cannot change their CBS passwords through any other application.
2. Emails which originate from CBS will no longer have hyperlinks to CBS. Emails from CBS may contain hyperlinks to the IPPD website, but emails should never contain a hyperlink to CBS. If a user receives an email from CBS which contains a hyperlink to CBS, the user should not click on the link and contact IPPD regarding the email.
3. Emails from CBS will never request that a user click on a hyperlink in order to verify the user's authentication credentials (e.g., user name, password, challenge questions and answers). If a user receives an email from CBS which requests that the user verify the user's authentication credentials through a hyperlink, the user should not click on the link and contact IPPD regarding the email.
4. If you have any questions regarding these changes to CBS, please contact AskCAMD@epa.gov.

« Return to CAMD Business System