At SEC3 Compliance, we’re tracking a phishing campaign impersonating the SEC to target smaller firms. Since June 23, 2025, several SECâregistered investment advisers, small hedge funds, and private equity firms have received phishing emails claiming to be from David Bottom, the SEC’s Chief Information Officer. The sender’s email includes sec.gov.virumail.com –
Lessons from a phishing scam posing as SEC information gathering

After tracking a phishing campaign impersonating the SEC, SEC3 Compliance share what they have learned so far and offer tips on how to avoid being scammed.
