On May 4, the Financial Industry Regulatory Authority (FINRA) issued Regulatory Notice 20-12 to warn member firms of a widespread, ongoing phishing campaign involving fraudulent emails purporting to be from FINRA officers, including Bill Wollman and Josh Drobnyk. 

These emails generally originate from a source domain name of “@broker-finra.org,” which is not connected to FINRA. FINRA recommends that firms should delete all emails originating from this domain name and, if a password was entered into an attachment to any such email, change that password immediately and notify the appropriate individuals in their firm of the incident.

FINRA Regulatory Notice  20-12 is available here.