NFDA received an alert from the Ohio Funeral Directors of a phishing scam that has been occurring in their state. We want to share the information should the scam begin spreading to other states.

In the case of each funeral home that was targeted, the scam followed a similar pattern:

• A consumer contacts the funeral home through an online form or email requesting electronic information about services, packages, pricing, or related options. The message is well-written and appears legitimate, including the email address.
• The funeral home responds with the requested information.
• The consumer then asks to schedule a virtual meeting to discuss options in greater detail.
• After the funeral home agrees, the consumer sends a virtual meeting link that appears legitimate.
• When the link is clicked, the webpage states that an update must be installed in order to access the meeting software and a download link is provided. If clicked, a software program is downloaded. This is a phishing attempt designed to give the scammer access to the funeral home’s device.

Funeral homes should remain vigilant and take proactive steps to protect their systems. When scheduling virtual meetings, funeral homes should control the process by setting the meeting date and time and sending the meeting link directly to the consumer.

Free versions of many popular virtual meeting platforms are available, with upgraded options typically offered at a low cost.

Please share this information with your staff and use caution when opening meeting links or downloading software updates from unknown sources.