Alerts

Warning: Emails sent claiming to be from the Solicitors Regulation Authority (SRA) using '@mysra.uk'

13 January 2023

Emails have been sent from the email domain name ‘@mysra.uk’ claiming to be from employees of the Solicitors Regulation Authority (SRA).

What is the scam?

A member of the public has advised us that they have been receiving emails from people purporting to be staff or executives of the SRA from email addresses using the format '[name]@mysra.uk'.

We understand that the recipient was asked to provide copies of payslips and bank statements.

The SRA does not use the email domain name '@mysra.uk' for email correspondence.

Is there a genuine firm or person?

General emails from the SRA end with the domain name '@sra.org.uk' and the SRA has no genuine connection to the emails referred to in the above alert.

More information about receiving emails from the SRA can be found here: www.sra.org.uk/home/contact-us/receiving-emails-from-us/.

What should I do?

When a firm's or individual's identity has been copied exactly (or cloned), due diligence is necessary. If you receive correspondence claiming to be from the above firm(s) or individual(s), or information of a similar nature to that described, you should conduct your own due diligence by checking the authenticity of the correspondence by contacting the law firm directly by reliable and established means. You can contact the SRA to find out if individuals or firms are regulated and authorised by the SRA and verify an individual's or firm's practising details. Other verification methods, such as checking public records (e.g. telephone directories and company records) may be required in other circumstances.