State Warns Vendors Of Fraudulent Emails Impersonating Government Agencies

HONOLULU - The Hawaiʻi Department of Accounting and General Services (DAGS), through its Office of Enterprise Technology Services (ETS), is alerting businesses and vendors of fraudulent emails impersonating state government agencies and requesting payments and sensitive information.

"Our administratively attached agency, The State Procurement Office (SPO), has received reports from vendors who were contacted by individuals falsely representing state agencies," detailed Acting Lieutenant Governor and DAGS Director Keith Regan, who is also the state comptroller. "In some instances, fraudulent emails requested a $400 deposit and directed recipients to complete a DAGS/Hawaiʻi State Archives form that appeared to be an official state document."

"These reports are concerning because they involve multiple state agencies and the businesses that rely on them," said Christine Sakuda, state chief information officer. "We are working across departments to address these threats and reinforce the importance of protecting the integrity of government operations."

SPO has also received reports of fraudulent emails impersonating other state agencies, including the Department of Business, Economic Development and Tourism and the Department of Budget and Finance.

"These scams are designed to exploit the trust that businesses and the public place in government agencies," said Vince Hoang, state chief information security officer. "Even when government systems have not been compromised, criminals can use an agency's identity to carry out fraudulent activity. Cybersecurity extends beyond protecting our networks and systems. It also means helping the people and businesses we serve, recognize threats before they become victims."

State officials urge businesses and members of the public to remain vigilant and take the following precautions:

• Verify payment requests. Contact the state agency directly using an independently verified phone number or official website before making any payment.
• Examine email addresses carefully. Fraudulent messages may use names, logos or addresses designed to resemble legitimate government communications.
• Avoid suspicious links and attachments. Do not open unexpected attachments or submit personal, financial or business information through unverified forms.
• Report suspicious communications. Notify the state agency being impersonated and provide a copy of the suspicious message for review.

"Vendors should feel confident that the payment requests they receive from state agencies are legitimate," said Bonnie Kahakui, administrator of SPO and chief procurement officer of the state's executive branch. "We encourage businesses to contact our office directly if they receive an unfamiliar request or have questions about a procurement-related communication." SPO may be reached at [email protected] or 808-586-0554. Its website is spo.hawaii.gov.

ETS has spent years strengthening email security measures to prevent unauthorized use of official hawaii.gov addresses. Today, most outgoing government emails from the state's executive branch use the hawaii.gov domain, reflecting the state's progress toward standardized, secure government communications. ETS continues working with departments to expand the use of the domain, making it easier for businesses and the public to recognize legitimate state communications and identify potential scams.

To learn more about cybersecurity information and resources, visit ets.hawaii.gov and cisa.gov.