Skip to Primary Navigation

Lessons from a phishing scam posing as SEC information gathering

Montage with a phishing hook catching the US SEC building.
GRIP Montage: Getty Images

After tracking a phishing campaign impersonating the SEC, SEC3 Compliance share what they have learned so far and offer tips on how to avoid being scammed.

At SEC3 Compliance, we’re tracking a phishing campaign impersonating the SEC to target smaller firms. Since June 23, 2025, several SEC‑registered investment advisers, small hedge funds, and private equity firms have received phishing emails claiming to be from David Bottom, the SEC’s Chief Information Officer. The sender’s email includes sec.gov.virumail.com –

Get full access, free for a month

Start your 28-day free trial to continue reading and access
all content on GRIP – no payment details required.

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience