Procurement and Logistics


State of Maryland has been made aware of a new phishing scam that targets the community of vendors doing business with the State of Maryland.  A phishing attack occurs when a fraudster tries to trick you into sharing personal information online. 

The scam attempts to lure vendors into taking certain actions, including visiting a fraudulent website to input personal information and/or to download malicious programs.  Other messages request that the vendor remit payments and provide remittance information within the body of the message in the form of a routing and account number.

The State of Maryland does not request payment or ask its vendors to provide personal information via email.

If you receive an email similar to the ones below, don’t reply.  You should delete the message immediately.  Do not open attachments, click links contained in the email, or provide any data to the websites mentioned or linked.  Refrain from remitting payment to bank account information provided. 

If you have questions, please contact the State at a trusted telephone number, or contact the Maryland Department of Information Technology service desk at (410) 697-9700.