Alerts

Warning: Phishing emails falsely claiming to be from a partner at Allen Overy Shearman Sterling LLP

20 June 2024

Emails have been sent falsely claiming to be from a partner at Allen Overy Shearman Sterling LLP

What is the scam?

The SRA has been advised that emails have been sent falsely claiming to be from a partner at Allen Overy Shearman Sterling LLP.  The emails request the recipient to transfer money to a bank account in relation to fees purportedly owed to the firm.

The emails were sent from the following domains which have now been suspended:

  • AllenOveryLawService069.onmicrosoft.com
  • AllenOveryLaws.onmicrosoft.com
  • AllenOveryLegal451.onmicrosoft.com
  • AllenOveryLegal.onmicrosoft.com
  • AllenOveryLaw.onmicrosoft.com
  • AllenOveryLawService.onmicrosoft.com
  • AllenOveryLegalServices740.onmicrosoft.com
  • allenoverylegalsservices.onmicrosoft.com
  • AllenOveryLawServices.onmicrosoft.com
  • AllenOverLegalServices.onmicrosoft.com
  • AllenOveryLawsServices.onmicrosoft.com
  • AllenOveryLegalPractice037740.onmicrosoft.com
  • AllenOveryLegalPractice037.onmicrosoft.com
  • AllenOverLegalsServices.onmicrosoft.com
  • AllenOverysLawServices.onmicrosoft.com
  • AllenOveryLegalServices957.onmicrosoft.com
  • AllenOveryLawServices266.onmicrosoft.com
  • AllenOveryLawService856.onmicrosoft.com
  • AllenOveryLegalServices022.onmicrosoft.com
  • AllenOveryLegalServices571.onmicrosoft.com
  • AllenOveryLLP886.onmicrosoft.com
  • AllenOveryLawLLP.onmicrosoft.com
  • alenoverylawservices.onmicrosoft.com
  • AllenOveryLawsLLP.onmicrosoft.com
  • AllenOveryLegalLLP.onmicrosoft.com

Any business or transaction through the email domains identified above is not undertaken by an individual or firm of solicitors authorised and regulated by the SRA.

Is there a genuine firm or person?

The SRA authorises and regulates a genuine firm of solicitors called Allen Overy Shearman Sterling LLP, SRA ID 401323. The genuine firm uses the domain '@aoshearman.com'.

The firm has confirmed that it has no connection to the emails referred to in the above alert.

What should I do?

When a firm's or individual's identity has been copied exactly (or cloned), due diligence is necessary. If you receive correspondence claiming to be from the above firm(s) or individual(s), or information of a similar nature to that described, you should conduct your own due diligence by checking the authenticity of the correspondence by contacting the law firm directly by reliable and established means. You can contact the SRA to find out if individuals or firms are regulated and authorised by the SRA and verify an individual's or firm's practising details. Other verification methods, such as checking public records (e.g. telephone directories and company records) may be required in other circumstances.