Novato officials are warning residents, property owners and businesses about an ongoing phishing scam in which cybercriminals are impersonating city staff to request fraudulent permit payments.
In a statement Wednesday, Novato officials said scammers are sending emails that appear legitimate by using publicly available permit information such as property addresses, case numbers and staff names. Some applicants involved in planning, building and permitting processes in Novato have already been affected.
The emails often include fake invoices and request payment through wire transfers, peer-to-peer payment apps or cryptocurrency. Messages may also use official-looking logos and language and warn of possible project delays to create urgency, city officials said.
City officials stressed they never request permit payments by email. Legitimate permit payments are accepted only through the city of Novato’s Permit Portal or in person at city administrative offices.
Residents are urged to carefully check sender email addresses and confirm any payment requests using verified contact information through the city’s website. Authentic city emails end with “@novato.gov,” while permit portal notifications come from MaintStar addresses ending in “@maintstar.co.”
City officials said similar scams are affecting agencies nationwide and encouraged anyone receiving suspicious messages to verify them directly with city staff using official contact information at novato.gov/contactus, before responding or sending money.