Supplier Alert: Fraudulent Purchase Order Scam

Be vigilant on receipt of order enquiries on behalf of Stantec

This message is for the attention of existing and potential suppliers to Croix Ability Services.

We want to alert you to a fraud scam that is targeting existing and potential suppliers of goods to Croix Ability Services, as well as other businesses in the UK. Please take the necessary precautions so that you are not a victim of this scam.

While Croix Ability Services cannot prevent this fraudulent activity, we are supplying the Police with details to investigate the matter as we become aware of specific instances.

The fraud scam involves purchase orders and requests for product quotations that purport to originate from Croix Ability Services but are in fact fraudulent.

The scam operates in the following way: the supplier will receive an email requesting a quotation for goods. Once the quotation has been provided, a purchase order is emailed to the supplier that bears resemblance to an authentic Croix Ability Services purchase order. The purchase order typically instructs delivery to an address not affiliated with Croix Ability Services. The purchase order may be accompanied by a Credit Reference Sheet which is a fraudulent document. Croix Ability Services does not issue a 'Credit Reference Sheet’. After shipping the item(s), the supplier never receives payment and is unable to retrieve the shipped products.

Indicators of fraud:

• Incorrect domain name used to send emails and purchase orders. A valid Croix Ability Services email address will always end in @croixaslimited.com.com. Hovering over the email address may reveal the originator’s email address if different from that displayed. An example of an incorrect domain being used by scammers is @crioxaslimited-engineering.com but other domains are being used.
• The delivery address is not a Croix Ability Services address. Fraudulent addresses will typically be a domestic residence or a self-storage facility.
• Poorly written email with grammatical errors.
• Use of a false or unknown contact from Croix Ability Services. If requests for quotations or purchase orders are received from a new Croix Ability Services contact that raises your suspicion, please email procurement.UK@croixaslimited.com to verify the validity of the request. Do not contact the name/number used on the email/purchase order.
• Phone numbers not associated with Croix Ability Services.
• Unusually large quantities are requested.
• Rush to ship priority/overnight.

What to do if you suspect fraudulent activity:

Email procurement.UK@croixaslimited.com to verify the validity of the request (please ensure you include any emails and documents you have received that relate to the enquiry).

A member of Croix Ability Services’s Procurement team will respond to your email as soon as possible to confirm the validity of the request and will provide advice on the action to take if the request is found to be fraudulent, including reporting the incident to Action Fraud or other authorities as an attempted fraud against your organization. Please do not attempt to call any phone numbers contained within the fraudulent emails that purport to be Croix Ability Services numbers as they will attract a service charge. In the UK, these numbers typically begin with 0843 / 0844/ 0845 / 070.

What Croix Ability Services is doing:

• Contacting existing suppliers that may be subject to this type of fraudulent activity in order to raise awareness and provide basic guidance on how to deal with it.
• Requesting that domain names used for fraudulent activity are closed.
• Reporting all instances of known fraudulent activity to Action Fraud and compiling evidence for all reported incidents.
• We have posted this notice to our website to help prevent current and prospective suppliers from falling prey to these schemes.

If you require further information, please email procurement.UK@croixaslimited.com.