Scammers are impersonating city officials and using public records to target developers and others in Denver.
The attackers are sending fraudulent emails — complete with a city logo and misleading email address — to people who have applied for a rezoning. The emails demand payment for “outstanding rezoning fees,” according to city officials.
Rezoning is a part of the development process. Companies and individuals file rezoning requests when they want city officials to change the rules for what can be built on a property.
The scammers likely got the contact information from public records. The city’s digital permitting system, which is accessible to everyone for free, includes contact details for applicants.
“I don’t know how much money they are trying to get, or if anyone has fallen for it,” wrote Amanda Weston, a spokesperson for the city’s technology department, in an email to Denverite. “We have had a few people reach out and ask about the validity of the email, which is how we were notified of the scam attempt.”
Scammers increasingly are impersonating officials from the city of Denver and other governments and companies. They usually aim to steal personal or financial information, or to compromise the victim’s digital security with “phishing” scams.
Scammers also are using generative AI to create increasingly detailed and convincing emails, sometimes customizing the message’s content, tone and dialect based on the victim’s identity — although it isn’t clear if that happened in this case.
The fraudulent emails were sent from the address [email protected]. The city’s actual email and website domain is denvergov.org.
“Cybercriminals are becoming increasingly sophisticated, using highly personalized tactics to exploit trust,” said Merlin Namuth, Denver’s chief information security officer, in a written statement. “We are urging the public to remain vigilant. If an email or message creates a false sense of urgency or asks for sensitive information, pause and verify. Your greatest defense is a moment of hesitation.”
The city of Denver provided the following tips for avoiding scam emails:
- Be cautious of suspicious emails, texts, and calls – especially ones that express a sense of urgency or pressure.
- Make sure to check the sender’s email address and all URLs to ensure that the communication is coming from the city: denvergov.org.
- Never click on links or open attachments from unknown senders. If you are unsure if the sender is from the city, call 311.
- Be cautious of unsolicited offers, donations, or requests for personal information.
- Use strong, unique passwords for each online account.
- Be mindful of what information you share online.
- Report suspected scams to the appropriate authorities.
