Fake: Invitation to register as ADNOC vendor
We invite your company to register for Abu Dhabi National Oil Company's (ADNOC) 2024/2025 Vendor Program.

Complete Email
From: ADNOC UAE <info@adnocvendorsrg.com>
Subject: Invitation to register as ADNOC vendor
Email Body
Dear Sir/Madam,
We invite your company to register for Abu Dhabi National Oil Company's (ADNOC) 2024/2025 Vendor Program.
This program facilitates partnership with qualified global companies.
To participate, please request: 1. Vendor Registration Questionnaire 2. Expression of Interest (EOI) forms.
Thank you for considering this invitation.
Sincerely,
Marcel Toney
Project Advisor
Vendor & Contracts Management Department
Abu Dhabi National Oil Company
Abu Dhabi, United Arab Emirates.
Red Flags
The email received raises several red flags that suggest it may not be legitimate and could potentially be a phishing attempt or scam. Here are the key concerns:
-
Suspicious Sender's Email Address:
- Email Domain: The email is sent from
info@adnocvendorsrg.com
. Official communications from the Abu Dhabi National Oil Company (ADNOC) are typically sent from an official domain, such as@adnoc.ae
. - Similar but Different Domain: The domain
adnocvendorsrg.com
is crafted to look similar to an official ADNOC domain but is not the same. This is a common tactic used in phishing emails to deceive recipients.
- Email Domain: The email is sent from
-
Generic Greeting:
- Impersonal Salutation: The email begins with "Dear Sir/Madam," rather than addressing you or your company by name. Legitimate business communications, especially invitations to register as a vendor, usually include personalized greetings.
-
Lack of Specific Information:
- No Company Details: The email does not mention your company name or any specific details about why you were chosen for this invitation.
- Vague Program Description: It refers to the "2024/2025 Vendor Program" without providing detailed information about the program or how it aligns with your business.
-
Unusual Request for Action:
- Request to "Please Request" Forms: Instead of providing direct links to official forms or an official registration portal, the email asks you to request the Vendor Registration Questionnaire and Expression of Interest (EOI) forms. This could be a tactic to initiate further communication and potentially extract sensitive information.
- No Contact Information Provided: There are no details on how or where to request these forms—no email address, phone number, or official website is provided.
-
Unverified Sender Identity:
- Unknown Sender: The email is signed by "Marcel Toney, Project Advisor, Vendor & Contracts Management Department." A search for this name in connection with ADNOC does not readily confirm that this person holds this position.
- Lack of Official Signature: Official emails from large corporations often include a detailed signature block with contact information, company logos, and sometimes confidentiality notices.
-
Formatting and Professionalism:
- Simplistic Format: The email lacks professional formatting, branding elements, and company logos that are typically present in official communications from large organizations like ADNOC.
- Grammatical Issues: While minimal, the language used is quite generic and lacks the formality expected in corporate correspondence.
-
Absence of Security Measures:
- No Encryption or Security Notices: High-stakes communications involving vendor registrations often include security notices or instructions regarding data protection, which are absent here.
-
Unexpected Communication:
- Unsolicited Invitation: If you did not previously express interest or communicate with ADNOC regarding vendor opportunities, receiving such an invitation out of the blue is unusual.
Recommendations:
- Do Not Respond Directly: Avoid replying to this email or providing any information without first verifying its legitimacy.
- Verify Authenticity:
- Contact ADNOC Directly: Use official contact information from ADNOC's official website (www.adnoc.ae) to inquire about the email's authenticity.
- Check the Domain: Verify whether
adnocvendorsrg.com
is an authorized domain used by ADNOC.
- Avoid Clicking Links or Downloading Attachments: Even though none are present in this email, be cautious with any future communications that may include them.
- Report the Email: Consider reporting this email to your organization's IT department or email provider to help protect others from potential scams.
- Maintain Security Practices: Ensure that your company's employees are aware of phishing tactics and know how to handle suspicious emails.
Conclusion:
The email exhibits several red flags common in phishing or scam attempts, including a suspicious sender's email address, lack of personalization, and vague requests for action. It is advisable to exercise caution and verify the legitimacy of this email through official ADNOC channels before taking any further steps. Protecting your company's sensitive information and assets should be the top priority.