MO Insurance Bulletin 2026-07: Scam Alert: Phishing Email Campaign Targeting Producers and Other Users of the National Insurance Producer Registry (NIPR) Licensing Platform

DEPARTMENT OF COMMERCE AND INSURANCE P.O. Box 690, Jefferson City, Mo. 65102-0690 INSURANCE BULLETIN 26-07 Scam Alert: Phishing Email Campaign Targeting Producers and Other Users of the National Insurance Producer Registry (NIPR) Licensing Platform Issued: April 9, 2026 The following Bulletin is issued by the Missouri Department of Commerce and Insurance ("Department") to inform and educate the reader on the specified issue. It does not have the force and effect of law, is not an evaluation of any specific facts or circumstances, shall not be considered a statement of general applicability and is not binding on the Department. See § 37 4.015, RS Mo (2016). To: All users of the National Insuran ::~:~: ce Producer Registry (NIPR) licensing platform, From: .i::::~D:::::e ~ Re: Phishing Scam Targeting NIPR Users The Director of the Department of Commerce and Insurance issues this bulletin to alert insurance producers and other users of the National Insurance Producer Registry (NIPR) to an active phishing email campaign targeting NIPR users. The phishing email campaign sends fraudulent emails to NIPR users that reference 2 past-due invoices and may appear to originate from familiar or trusted domains, including @nipr.com, @naic.org, or @stripe. The emails falsely claim to be from NIPR and request payment. These messages are fraudulent and were not sent from an official NIPR email address or account. Any unexpected or unsolicited invoice should be treated as suspicious: • If a producer or other NIPR user receives an unexpected invoice email claiming to be from NIPR, stop immediately. • Do not open attachments, click links, or submit payment in response to suspicious or unexpected invoice emails. • If there is any doubt about the legitimacy of an invoice or email, contact niprbillingdept@nipr.com before responding or taking further action For more information, insurance producers and other NIPR users are encouraged to visit NIPR’s phishing information page. This page includes helpful tips for identifying fraudulent emails, including unmasking vanity/fake email domains, looking for generic greetings (e.g., “Dear Customer”), and examining the tone and grammar of emails for signs of phishing. NIPR's and NAIC’s cybersecurity teams are actively investigating and monitoring this phishing activity. Questions regarding this Bulletin can be directed to the Licensing Section at 573-751- 3518 or licensing@insurance.mo.gov. ###