Trending guide · Reviewed October 3, 2026
Quick answer: Sullivan & Cromwell is a real law firm, but scammers have impersonated it. An unexpected copyright notice, invoice or confidential payment request needs independent verification before you download anything or transfer money.
Searching for a Sullivan and Cromwell scam email? Start by separating the firm’s identity from the message in your inbox. A convincing name, signature or telephone number does not establish who sent it.
What impersonation has been documented?
A Solicitors Regulation Authority warning (PDF) dated July 30, 2025, with a September 2025 update, describes:
- Fraudulent invoices using genuine lawyers’ names.
- Acquisition-related calls seeking an NDA and transfer of funds, including a report of a possibly AI-generated familiar voice.
- Copyright allegations directing a social-media user to download supposed evidence through a link suspected of containing malware.
The copyright example even included the firm’s genuine New York switchboard number. The warning establishes impersonation; it does not make the real firm responsible for those messages.
Evidence date: These are historical regulator reports. Our October 3, 2026 review did not verify a new campaign, current fraudulent sender or number of people affected. The reported search trend alone does not establish any of those things.
How to verify a Sullivan & Cromwell email or call
The SRA register lists Sullivan & Cromwell MNP LLP under number 308712 and identifies sullcrom.com as its website. That confirms a genuine regulated entity; it does not endorse an unsolicited message.
- Leave the message and choose your own contact route. Start with the firm’s official contact page. Avoid using a reply address or callback number supplied only by the message.
- Ask about the actual communication. Give the claimed lawyer’s name, message date and subject. Ask whether that person or team sent it. “Does this lawyer work there?” is a different question.
- Confirm the payment separately. Ask your established contact to verify the intended recipient, amount and bank details. For a workplace request, follow your normal approval process.
- Keep sensitive material out of an initial inquiry. The firm’s contact page says submitting an email does not create an attorney-client relationship and cautions against sending confidential information through that page.
The FBI’s business email compromise guidance recommends independently verifying payment requests and changes to account details. It also warns about lookalike addresses, harmful attachments and pressure to act quickly.
What to do about a copyright infringement notice
Preserve the message while checking its origin. A useful verification question is: “Did your office send this notice about this specific account or post?” You do not need to download the attachment first to ask.
Do not assume a message is authentic because it quotes a law, names a client or uses a legal deadline. Equally, this article cannot decide whether a genuine copyright claim has merit. If the firm confirms the notice, discuss the response with a qualified lawyer rather than assuming every legal email is fraudulent.
If you clicked, shared information or sent money
- Possible harmful download: the FTC’s phishing guide recommends updating security software and running a scan.
- Disclosed personal or financial details: use the IdentityTheft.gov recovery resource linked in that FTC guide for steps matched to what you shared.
- Transferred money: contact your financial institution immediately. The FBI advises asking it to contact the receiving institution and reporting business email compromise through IC3.
- Work account or device involved: notify your IT or security team promptly and explain what you opened, entered or approved.
Save available messages and transaction records. Do not reopen a suspicious file to collect more evidence. Recovery is not guaranteed, so do not delay contacting your payment provider while waiting for a reply from the purported sender.
If an impersonation email requests an invoice payment or changes bank details, see our business email compromise guide.
Sullivan & Cromwell scam email FAQs
Is Sullivan & Cromwell a scam?
Sullivan & Cromwell is an established law firm. This guide addresses people misusing its identity. Finding the firm or a lawyer in a public directory does not authenticate the person who emailed you.
Is a Sullivan & Cromwell copyright email genuine?
That cannot be decided from the name alone. Verify the particular message independently before opening its evidence link. If the firm confirms a genuine legal claim, get appropriate legal advice about your response and any deadline.
Does an @sullcrom.com address prove the email is safe?
No. Check the full sender and reply-to information, but do not treat the displayed address as conclusive. The SRA’s historical copyright example included an apparent address using the real domain.
Should I download the file to find out what I am accused of?
Do not use an unexpected download as your verification method. Ask the independently contacted firm to confirm the matter and provide a safe way to review any authentic correspondence.
What if the caller sounds like my boss?
Confirm through your normal workplace channel before approving a transfer. A familiar-sounding voice should not replace payment controls, particularly when the caller demands secrecy or bypassing another approver.
Does today’s search trend prove a new scam outbreak?
No. Increased searches do not establish the cause, number of victims or age of a message. This guide was checked October 3, 2026; its specific regulator warning is dated 2025.
Related TIAS guide
If the contact instead claims to be a federal agent, our FBI scam call and video meeting guide explains how to verify that separate type of impersonation.
ThinkItsAScam.com is independent and is not affiliated with Sullivan & Cromwell or the agencies cited here. This guide helps assess suspicious contact; it cannot authenticate a particular message or resolve a legal claim.
Leave a Reply