Overview:
Stay alert! The Palau National Communications Corporation (PNCC) has issued an urgent warning regarding a sophisticated phishing scam targeting email users in Palau. Scammers are impersonating trusted contacts with fake Adobe Acrobat document-signing requests designed to steal your passwords and compromise personal accounts. Learn how to spot these fraudulent messages and protect your digital security.
Scammers impersonate people you know to trick victims into clicking links
KOROR, Palau (Oct. 15, 2026) — Residents are being warned about an ongoing phishing scam targeting email users in Palau, where fake document-signing requests designed to look like Adobe Acrobat messages could expose passwords and compromise personal accounts.
The Palau National Communications Corporation (PNCC) issued an alert Thursday warning that scammers are sending emails that appear to come from people the recipient knows. The messages may look like legitimate requests to review or sign documents, but clicking the links could allow scammers to steal login information and gain access to accounts.
The scam takes advantage of people’s trust in familiar names and their willingness to respond to what appears to be an ordinary work or personal request.
PNCC is urging residents to verify unexpected document requests before taking any action, even when an email appears to come from a friend, family member or coworker.
Do not click first and ask questions later
PNCC advises recipients to call or text the supposed sender using a trusted phone number to confirm whether the document request is genuine. People should not use contact information provided in a suspicious email to verify the message.
Residents should also avoid clicking links, opening attachments, scanning codes or replying to suspicious emails. Checking the actual sender’s email address, rather than relying on the displayed name, can help identify messages that may be fraudulent.
Another warning sign is a message that pressures the recipient to act immediately. Scammers may use urgent language to make people panic and click before checking whether the request is legitimate.
PNCC recommends enabling two-step verification on important accounts. This adds another layer of security and can help prevent unauthorized access even if a password has been stolen.
What if you already clicked the link?
People who have already clicked a suspicious link, signed a document or entered their personal details should act quickly.
PNCC advises them to change their passwords immediately, starting with their email account. Anyone who used a work device or account should notify their company’s information technology team. If financial information was shared, they should contact their bank.
A compromised email account can put more than one account at risk, particularly when the same password is used for multiple services or when email is used to reset other account passwords.
PNCC also reminded the public that the corporation will never ask customers to provide their passwords, personal identification numbers (PINs) or payment details through links.
The alert serves as a reminder that an email bearing a familiar name or the appearance of a trusted service does not automatically mean the request is genuine.
Before signing an unexpected document, residents should verify who sent it. A quick phone call could help prevent the loss of account access or the exposure of personal and financial information.
Source: Palau National Communications Corporation, public service alert issued Oct. 15, 2026.