We at Cyber Security Solutions have noticed a surge in phishing emails targeting Barbadian users. These emails falsely claim to be from Flow, urging recipients to pay their bill. However, upon inspection, the sender is not Flow, but a compromised Caribsurf account.

It appears that many Caribsurf accounts have been hijacked and are now being used to distribute these fraudulent messages. If you currently have — or previously had — a Caribsurf account, we strongly advise the following:

• 🔒 Check your account status immediately.
• 🛑 Request Flow to disable the account if it's no longer in use.
• 🔁 If still active, change your password to a secure one — ideally 16 characters or more.

Always verify the sender’s email address before engaging with any message. If you're unsure, do not click any links. Instead, navigate directly to the official Flow website to manage your account.

Stay vigilant. These phishing campaigns are designed to exploit trust and urgency — don’t let them succeed.

This is an image of what the fraudlent email may look like.

Over the past few weeks, we at Cyber Security Solutions have noticed a surge in phishing emails claiming to be from the Barbados Public Workers' Co-operative Credit Union. These emails are urging recipients to Verify your email address and log in. However, upon inspection, the sender is not the Credit Union, but a compromised Caribsurf account and the enclosed link is to a fraudulent website.

It appears that many Caribsurf accounts have been hijacked and are now being used to distribute these fraudulent messages. If you currently have — or previously had — a Caribsurf account, we strongly advise the following:

• 🔒 Check your account status immediately.
• 🛑 Request Flow to disable the account if it's no longer in use.
• 🔁 If still active, change your password to a secure one — ideally 16 characters or more.

Always verify the sender’s email address before engaging with any message. If you hover your mouse over provided links you can see the true destination of the link without having to click the link. If you're unsure, do not click any links. Instead, navigate directly to the official Barbados Public Workers' Co-operative Credit Union website in a new browser to manage your account or call the credit union directly to enquire about the email you received.

Stay vigilant. These phishing campaigns are designed to exploit trust and urgency — don’t let them succeed.

Note this new email pictured below plays on the security concerns caused by the first round of emails, and encourages users to click the link to apply security updates. Please note the fraudlent link in this newly circulating email does not actually point to the Barbados Public Workers' Co-operative Credit Union website.

These are images of what the fraudlent emails may look like "click on image for larger view". Please note the link does not point to the Credit Union website. The emails do show an email address from the credit union but also contains a second email address which changes depending on which email account is was actually sent from.