Phishing Emails Impersonating NIPR

♦INSURANCE.DELAWARE.GOV♦ 1351 W. NORTH ST., SUITE 101, DOVER, DELAWARE 19904 (302) 674-7300 DOVER♦ (302) 259-7554 GEORGETOWN♦ (302) 577-5280 WILMINGTON TRINIDAD NAVARRO COMMISSIONER STATE OF DELAWARE DEPARTMENT OF INSURANCE PRODUCERS AND ADJUSTERS BULLETIN NO. 41 TO: ALL LICENSED INSURANCE PROFESSIONALS LICENSED TO TRANSACT BUSINESS IN DELAWARE AND INTERESTED PARTIES RE: PHISHING EMAILS IMPERSONATING NIPR DATED: April ____, 2026 The Delaware Department of Insurance (“Department”) is issuing this Bulletin to warn licensees about a targeted phishing campaign in which fraudulent emails falsely claim to be past-due invoices from the National Insurance Producer Registry (“NIPR”). These messages may appear to originate legitimate looking domains, including @nipr.com, @naic.org, or @stripe.com. These emails are designed to trick recipients into clicking on malicious links or submitting unauthorized payments. This Bulletin provides guidance on identifying these fraudulent messages and outlines recommended protective actions. Detection of Fraudulent Past-Due Invoice Emails Licensees are advised to use caution when emails exhibit any of the following warning signs: • An invoice or payment request you were not expecting • Urgent language demanding immediate payment or action • Hyperlinks that do not direct to an official NIPR domain • Attachments labeled as invoices or payment confirmations • Slight misspellings, unusual formatting, or inconsistencies in the sender’s address If any of these indicators are present, treat the message as suspicious. Recommended Actions • Do not click links or open attachments in any unexpected NIPR invoice email • Verify invoice authenticity directly with NIPR at niprbillingdept@nipr.com • Delete the email if it appears fraudulent • Report suspicious messages to your IT or security team • Ensure staff are trained to recognize invoice‑related phishing attempts Questions about this Bulletin should be emailed to Licensing@delaware.gov. 15 Note: This Bulletin is intended solely for informational purposes. It is not intended to set forth legal rights, duties, or privileges, nor is it intended to provide legal advice. Readers should consult applicable statutes and rules and contact the Delaware Department of Insurance if additional information is needed. Page | 2 This Bulletin shall be effective immediately and shall remain in effect unless withdrawn or superseded by subsequent law, regulation or bulletin. ______________________________________ Trinidad Navarro Delaware Insurance Commissioner