Over the past few days, Cyber Smart Empire has identified a new and growing email scam targeting startup founders, app developers, and business owners, especially those preparing to publish apps on Apple App Store or Google Play.
The scam disguises itself as a “free D-U-N-S Number confirmation request” and is already landing in inboxes across Nigeria and beyond.
If you build apps, run a startup, or manage a registered business, this concerns you directly.
What the Scam Looks Like
Victims are receiving emails with subjects similar to:
“Confirmation of D-U-N-S Number Request”
The email claims:
- You requested a free D-U-N-S Number
- The sender is “confirming” your request
- They offer to “proceed with the application” on your behalf
The message appears polite, professional, and well-written, which is exactly why it’s dangerous.
Why This Email Is a Scam
Cyber Smart Empire’s initial analysis shows multiple red flags:
Fake or Impersonated Domains
The sender uses a domain like:
@dnbsame.com
This is NOT an official Dun & Bradstreet domain.
Official D&B emails typically come from @dnb.com
You Did Not Initiate Contact
Legitimate D-U-N-S processes do not begin with random confirmation emails.
If you never applied, no one should be “confirming” anything.
Social Engineering Tactic
The email:
- Creates false familiarity
- Uses “Dear Sir/Ma” (mass targeting)
- Pushes you to confirm quickly
This is a classic social engineering setup designed to:
- Collect your business details
- Later demand “processing” or “expedite” fees
- Or hijack your app publishing process
Misuse of a Legitimate Truth
Yes, D-U-N-S Numbers are free for app publishing.
Scammers exploit this truth to:
- Sound credible
- Gain your trust
- Insert themselves as “agents.”
How the Scam Escalates
From our experience, the next steps often include:
- Requests for CAC documents
- Requests for Apple Developer account access
- Fake “verification” or “handling” fees
- Delays used to pressure victims into paying
At that point, the damage is already done.
What You Should Do Instead
If you need a D-U-N-S Number:
Apply directly through official Dun & Bradstreet channels
Never use unsolicited “agents”
Never send business documents via email links
Never pay third parties claiming to “speed up” D-U-N-S issuance
Cyber Smart Empire is actively:
- Monitoring this scam campaign
- Documenting impersonation patterns
- Preparing a technical and legal takedown report
This blog serves as the first public warning.
More updates will follow.
Help Others Stay Safe
If you received a similar email:
- Do not reply
- Do not click links
- Report it as spam
- Share this article with founders and developers
Cybercriminals no longer rely on poor grammar or obvious tricks.
They now imitate legitimate business processes.
Awareness is your first line of defense.
Cyber Smart Empire remains committed to protecting the digital ecosystem one alert at a time.
