Alerts

Warning: Emails misusing the name of Duncan Lewis Solicitors

16 April 2021

Correspondence has been sent misusing the name Duncan Lewis Solicitors

What is the scam?

The SRA understands that emails were sent to members of the public that falsely purported to be from 'Duncan Lewis Solicitors'.

The email seen by the SRA appears as if it was sent from Duncan Lewis Solicitors was in fact sent from ‘mhilliard@madisoncorsecure.org’. 

The SRA has also been advised that the emails were also sent from the following email addresses:

  • @pascallockhorst.de
  • edson@comp.com.br
  • engenharia@hospitalsaocamilo.org.br
  • arte@artedosaromas.com.br
  • support@nir-kirov43.ru

The SRA has been advised that the emails invited the recipient to click on a link in the email to access a file.  A concern is that the link may contain malware and should not be accessed.

Is there a genuine firm or person?

The SRA authorises and regulates a genuine firm of solicitors called Duncan Lewis Solicitors.  The genuine firm uses email addresses that end with the domain name '@duncanlewis.com'

The genuine firm have confirmed that they do not have a genuine and intended connection to the emails referred to in the alert above.

What should I do?

When a firm's or individual's identity has been copied exactly (or cloned), due diligence is necessary. If you receive correspondence claiming to be from the above firm(s) or individual(s), or information of a similar nature to that described, you should conduct your own due diligence by checking the authenticity of the correspondence by contacting the law firm directly by reliable and established means. You can contact the SRA to find out if individuals or firms are regulated and authorised by the SRA and verify an individual's or firm's practising details. Other verification methods, such as checking public records (e.g. telephone directories and company records) may be required in other circumstances.

If you received the email referred to in the above alert you should not click on the link. It is understood however, that if you have already clicked on the link you should not enter your personal details.