The GSA Office of Inspector General just issued a Scam Alert. If you are a Multiple Award Schedule contractor or you’re registered in SAM.gov, you need to know about this one.
Scammers are impersonating real GSA employees. They’re pairing real titles, real names, and signature blocks with look-alike email domains built to pass a quick glance as official GSA addresses. Two scams have already been reported: fake “vendor credentialing fee” requests asking for payment information, and bogus “records digitization non-compliance” notices pressuring recipients to act or hand over information immediately.
Check the actual sending domain, not just the display name. Legitimate GSA email addresses always end in @gsa.gov. A name, title, or GSA logo in the signature proves nothing on its own; scammers can copy all of that. If a request feels unexpected or urgent, verify it independently. Use contact information you already have on file for your Contracting Officer, not anything provided in the email itself.
Never send payment, banking, or sensitive information, and never open an unsolicited attachment, until you’ve confirmed the request is real. GSA has already blocked the malicious domains identified so far and is actively monitoring the situation, but new look-alike domains can pop up quickly, so don’t let your guard down.
If you receive a suspicious email hold onto it, including the headers if you can get to them, and let your GSA Contracting Officer or another verified GSA contact know right away. Then report it to:
- GSA OIG Hotline: gsaig.gov/hotline
- FBI Internet Crime Complaint Center: ic3.gov
You can read the full alert directly from GSA OIG here: Scammers Impersonating GSA Contracting Officials Target Vendors and Contractors
GSA Proposal Maven Inc. is a government contract firm that has helped thousands of businesses increase their bottom line with the GSA MAS contract program, 8(a) Certification Program, VOSB Certification, SDVOSB Certification, and other federal agency contracts. Contact us at (877) 302-3773 or click here to schedule your FREE fifteen-minute consultation by clicking here.
Get your FREE report, “5 Tips To Master The GSA Schedule Application Process” or schedule your fifteen-minute consultation by clicking here.
Stay sharp out there. A quick domain check takes ten seconds. Sending payment info to a scammer takes a lot longer to undo.