We have recently been made aware of a phishing email campaign targeting Omnicell customers. An unauthorised third party is attempting to impersonate Omnicell Accounts Receivables and is fraudulently requesting changes to payment account details.
We want to make you aware of this and provide guidance that is intended to help protect your organisation.
The fraudulent emails appear to come from Omnicell but contain subtle inaccuracies, including an incorrect email domain spelling:
- FRAUDULENT email address:
AccountsreceivableUK@omincell.com (incorrect spelling) - LEGITIMATE email address:
AccountsReceivableUK@omnicell.com
Please always verify the sender’s email address carefully, as this often is a key indicator of phishing activity.
The phishing emails may ask you to update payment details to the following account, which is NOT associated with Omnicell. Do not send payments using these payment details under any circumstances.
- Bank: Barclays Bank UK PLC
- Account Name: Omnicell Ltd
- Sort Code: 20-98-68
- Account Number: 43257185
- IBAN: GB15BUKB20986843257185
- SWIFT Code: BUKBGB22XXX
Omnicell has not changed its payment details.
Actions Designed to Protect Your Organisation
- Do not act on any emails requesting changes to payment details without verification.
- Always independently confirm any banking changes directly with your Omnicell account representative.
- Check sender email addresses carefully for spelling variations, and confirm that sender email addresses are correctly spelled and originate from @omnicell.com
- Report suspicious emails to your internal IT/security team.
- Contact your Omnicell account representative if you are unsure about any request
If you have any concerns or require verification of payment details, please contact your local Omnicell representative directly in the first instance or reach out to your TIAA anti-crime specialist.