Scam alert
A State Business Office Email Has a Locked File and a Code? Skip It
Posted
Connecticut · portal.ct.gov · Arrives by an email
The short answer
An email from a state business filing office saying a secure document was shared with you, with an attachment to download and an access code to unlock it, is the sign to stop. On October 21, 2026, Connecticut's Secretary of the State warned businesses about an email like this posing as the office's Business Services Division. Real emails from the office end in @ct.gov. Do not open the attachment. Go to Business.CT.gov yourself and log in to see your filings.
What is happening
On October 21, 2026, Connecticut Secretary of the State Stephanie Thomas warned businesses about an email with the subject line "RE: Connecticut Office of the Secretary of the State, Business Services Division" that claims a secure document has been shared and tells the reader to download an attached file and enter an access code to unlock it through a so-called secure portal. The office said this kind of email can trick people into revealing login credentials or other sensitive information, or expose their devices to malware, and WTNH News 8 reported the warning the same day.
How to recognize it
- An email says a secure document has been shared with you and gives you an access code to unlock an attached file.
- The subject line reads "RE: Connecticut Office of the Secretary of the State, Business Services Division."
- The sender's address does not end in @ct.gov. Look for lookalikes such as @cct.gov or @ct-gov.org.
- The email pushes you to click a link or open an attachment to deal with a business filing.
What to do instead
- Do not reply to the email, click its links, or open its attachments.
- Check the real sender by hovering over or clicking the "from" address.
- Make filings by going to Business.CT.gov yourself and logging in. Connecticut says you never need to click a link in an email to make a business filing.
- Never give your Business.CT.gov login to anyone, and turn on multi-factor authentication.
- If you want to tell someone, the rule is: business filings start at Business.CT.gov, never at a link or file in an email.
If it already happened
Responding to one of these is common and understandable. These steps are what people usually take next.
- These emails are made to look like routine state paperwork, so opening one is easy to do.
- If you entered your Business.CT.gov login, change the password right away and turn on multi-factor authentication.
- If you opened the attachment, run a security scan on the device, or ask whoever handles your computers to check it.
- Report it at ReportFraud.ftc.gov.
Common questions
- The email came from a ct.gov address. Is it safe?
- Not always. Connecticut says to stay suspicious even when an email looks official, and that if you are unsure about a link, even in an email from @ct.gov, do not click it. Go to Business.CT.gov yourself instead.
- Is this the same as the Hawaii vendor emails?
- No, but it is similar. Another alert on this site, An Email From a State Agency Wants a $400 Deposit? Call the Agency, covers emails in Hawaii that asked state vendors for a deposit.
Practice this safely
Practice ignoring a link or file in an unexpected email and going to the official website yourself.
Every story is fictional. There is no timer, no score, and no real message, payment, or account.
Tell someone
Copy a short note you can paste into a text or email. It names the scam, the next step, and this page. Nothing is sent from this site.
A State Business Office Email Has a Locked File and a Code? Skip It An email from a state business filing office saying a secure document was shared with you, with an attachment to download and an access code to unlock it, is the sign to stop. On October 21, 2026, Connecticut's Secretary of the State warned businesses about an email like this posing as the office's Business Services Division. Real emails from the office end in @ct.gov. Do not open the attachment. Go to Business.CT.gov yourself and log in to see your filings. Read the full alert: https://endscamsproject.com/latest-scams/state-business-filing-phishing-email
Where this comes from
These links open the published sources in a new tab. The destination is shown before you open it.
- Connecticut Secretary of the State: Secretary Thomas warns businesses of phishing email impersonating State Business Services Division (October 21, 2026) (opens in a new tab)
portal.ct.gov
- WTNH News 8 via AOL: Connecticut Secretary of the State warns against phishing email (October 21, 2026) (opens in a new tab)
aol.com
- Report fraud to the Federal Trade Commission (opens in a new tab)
ReportFraud.ftc.gov
The full guide on this
More recent alerts
This alert provides general educational information drawn from the sources above. It cannot determine whether a specific message you received is genuine, investigate an incident, or promise recovery or reimbursement.