Home/Legal/Security warning
Security warning

Recognising fraud, phishing, and impersonation

Vendor impersonation and invoice fraud have increased across the Western Balkans in recent years. This page sets out how ERAM Group communicates, what we will never ask you to do, and how to verify a contact that claims to come from us.

Draft template — legal counsel review required. This page is a structural draft prepared to the framework of GDPR (Regulation EU 2016/679), the EU Whistleblower Directive (2019/1937) where relevant, and applicable Kosovo law. It is not legal advice. Final text must be reviewed and approved by qualified legal counsel before publication.

How ERAM Group communicates

  • All email from ERAM employees comes from an address ending in @eram-group.net. We do not use free email providers (Gmail, Yahoo, Outlook.com, Hotmail) for business communication.
  • Invoices are issued from our finance system and reference your contract or order number. They are sent from finance@eram-group.net or from your designated account contact.
  • Payment instructions are issued only in writing on official letterhead, signed by an authorised signatory, and never change mid-transaction.
  • Bank account details for ERAM Group are stable. We will not request payment to a new account or to a personal account.

What we will never do

  • Ask you to send payment to a different bank account by email without prior written confirmation through an authenticated channel.
  • Request your password, login credentials, two-factor codes, or full payment card numbers by email or telephone.
  • Pressure you to act urgently on a payment instruction without time to verify.
  • Ask for cryptocurrency, gift cards, or payment to a third-party account.

If you receive a suspicious communication

If you receive a communication that purports to come from ERAM Group and you are uncertain of its authenticity:

  1. Do not click links or open attachments in the suspicious message.
  2. Do not reply to the suspicious message.
  3. Verify by contacting your established account contact at ERAM through the telephone number printed on your most recent legitimate invoice, or by contacting us at security@eram-group.net.
  4. Forward the suspicious message (with full headers) to security@eram-group.net so we can investigate.

Reporting fraud

If you believe you have already responded to a fraudulent communication impersonating ERAM Group, report it immediately to your bank, to the Kosovo Police Cybercrime Unit, and to us at security@eram-group.net. Time is critical in recovering payments to fraudulent accounts.

Recruitment fraud

ERAM Group does not charge candidates any fee at any stage of recruitment. We do not ask candidates to pay for training materials, equipment, or visa processing. Any recruitment communication that asks for payment is fraudulent. Report it to security@eram-group.net.