Hello City of Asheville Permit Customer,

We want to make you aware of an important cybersecurity concern: there has been an increase in sophisticated "phishing" attempts. These are deceptive emails designed to trick recipients into revealing sensitive information or making fraudulent payments. Some of these malicious emails may even appear to come from government sources, making them particularly convincing.

Please be advised of a critical warning:

The City of Asheville will NEVER reach out asking for wire transfers from permit holders via email.

Any email that requests a wire transfer for your permit or any other City service is fraudulent and should be immediately disregarded. All official permit payments and processes are conducted through secure, verified channels, and we will never solicit payments through unsecured methods like wire transfers via email.

To help you protect yourself and your projects, please keep the following essential cybersecurity tips in mind when managing your email:

1. Be Extra Cautious About Clicking Links in Email Messages: Even if an email seems to be from a legitimate source, it's always safest to hover your mouse cursor over any links before clicking. Look for misspellings in the URL, unusual domain names (e.g., https://www.google.com/search?q=cityofasheville.com instead of ashevillenc.gov), or strange characters. If anything looks suspicious, do not click the link.
    

2. Be Especially Suspicious of Unexpected Messages Requesting Action: Phishing emails often try to create a false sense of urgency, urging you to "click now," "reset your password," "confirm account details," or "verify a payment." If you were not expecting a message that demands immediate action, take a moment to verify its legitimacy through an independent, trusted channel (e.g., calling the City department directly using a number you know is official, or visiting the official City website by typing the address yourself).
    

3. Government Email Addresses Can Be Spoofed or Compromised: The presence of a .gov sender address does not guarantee an email's authenticity. Cybercriminals can "spoof" email addresses to make them appear legitimate. In some rare cases, even legitimate government accounts can be compromised. Always critically evaluate the content and context of the message. Does it align with your current permit activities? Does it sound like typical City communication? Does it ask for unusual payment methods?
    

What to Do If You Receive a Suspicious Email:

• DO NOT click on any links.

• DO NOT open any attachments.

• DO NOT reply to the email.

• DO NOT provide any personal or financial information.

• Delete the email immediately.

If you are concerned about a legitimate transaction or need to verify information related to your permit, please contact the City of Asheville's Development Services department directly. Contact information can be found here: https://www.ashevillenc.gov/department/development-services

Your vigilance is a crucial component of our collective security. By staying informed and exercising caution, you help protect yourself, your valuable projects, and our entire community.

Thank you for your cooperation in ensuring a safe and secure environment, both in our buildings and in our digital interactions.

Sincerely,

The City of Asheville Development Services Department