Secretary of State Warns Businesses of Fake Records-Compliance Emails

The Tennessee secretary of state’s office warned businesses on Friday that fraudulent emails are being sent to Tennessee companies claiming they are being penalized for noncompliance with state records laws. The warning applies to businesses statewide, including small businesses in Old Hickory.

In a notice posted at sos.tn.gov, the office said the emails include a fake state form that requests payment and contains links to a payment application. “This form is not issued by our office, and the payment request is completely fraudulent,” the office said.

A sample of the scam, from a “FAKE”-stamped example the secretary of state’s office posted with its notice, cites a “compliance review by the Tennessee Department of Finance and Administration and the State Library & Archives under Tennessee Code Annotated § 10-7-702” and says a flag was placed on contracts for fiscal years 2025 and 2026. The text of the state’s notice does not mention that statute or those agencies. The Citizen is not naming the recipient business, which was redacted, or the name on the signature line, which may be spoofed.

The statute cited in the sample does not support the payment demand. Section 10-7-702, in the municipal records part of Tennessee’s public records law, authorizes the University of Tennessee’s Municipal Technical Advisory Service, working with the State Library and Archives, to compile records-retention manuals as guides for city officials. It also allows city governing bodies to dispose of municipal records after they have been preserved or a retention period expires. It does not create a compliance review, a contract flag, or a penalty payment for private businesses.

The secretary of state’s office said businesses should not click the links, submit payment, or provide personal or financial information. Anyone who receives one of the emails, or who has questions, should report it to the Records Management Division at 615-741-5739.

As of Friday afternoon, a search of public alerts found no notice from the FBI’s Internet Crime Complaint Center, the Tennessee Department of Commerce and Insurance, or the Better Business Bureau that specifically describes this records-compliance email. Those organizations have issued broader warnings about government-impersonation and fake compliance-notice scams. Businesses can also file an internet crime complaint at ic3.gov.