Be Aware of Phishing Scams

It has come to our attention that some providers received a phishing attempt claiming to be from the Office of Compliance using the DODD logo. Please note that DODD does not have a messaging portal and only sends emails from an "@dodd.ohio.gov" domain.

Below is an example of the phishing attempt with red flags in bold:

From: "Ohio Department of Developmental Disabilites Office of Compliance DODD" <<strong>[email protected]>

To:

Cc:

Sent: Tue, Feb 3, 2026 at 11:48 AM

Subject: Home and Community-Based Waiver Services

You have received a secured message from the Ohio Department of Developmental
Disabilites, Office of Compliance secure messaging system.

For your security, to access the secure message

Use the extension below to view message in your browser, and follow the instructions to access the message.

View Secure Message (inaccurate link when hovered)

Encrypted message from OneDrive secure messaging system

Phishing Red Flags. What to Watch For (Tips):

1. Unexpected messages claiming to be from DODD, Compliance, or leadership, especially if you weren't expecting contact.
2. Urgent or threatening language ("immediate action required," "account will be suspended").
3. Requests for credentials or sensitive information. DODD will never ask for passwords via email.
4. Suspicious sender addresses, look closely for misspellings or non-state domains.
5. Links or attachments you weren't expecting, hover over links to check the real destination before clicking.
6. Poor grammar, odd wording, or formatting that doesn't match normal DODD communications.
7. Logos alone do not mean legitimacy, attackers often copy official logos to appear credible.

What To Do If You're Unsure

1. Do not click links or open attachments.
2. Verify through a trusted channel (e.g., known phone number or official website).
3. Report the message to your IT or security contact immediately.