Security and Fraud Center

Protect Yourself from Fraud and Impersonation Scams

Fraudsters may misuse the State Street name, trademarks or imagery to promote fraudulent investment opportunities or obtain personal or financial information. State Street does not offer or solicit personal investments, or provide cryptocurrency trading advice through social media or messaging platforms such as WhatsApp, Telegram, WeChat, Instagram, Facebook, Threads, LINE, Bluesky, etc. If you receive such a communication, do not respond, provide information, transfer funds or click any links. Report it using the contact information below.

State Street may take appropriate action against fraudsters and third parties who misuse our trademarks and proprietary images.

State Street is unable to provide specific advice to victims or targets of fraud. The guidance below may help you recognize and avoid fraud and identify the appropriate reporting channel.
 

Protect Yourself Against Social Engineering Attacks

Social engineering is the use of deception to persuade a person to disclose information, transfer money, open a malicious link or take another unsafe action. It may occur through email, telephone calls, text messages, websites or social media.

How to Avoid Becoming a Victim:

  • Independently verify unexpected requests using trusted contact details, not information supplied in the message.
  • Do not click suspicious links, open unexpected attachments or enable macros.
  • Be skeptical of urgent, threatening or unusually attractive requests and offers.
  • Protect personal, financial and account information and disclose it only to authorized parties.

Cyber Fraud Prevention and Protection

  • Never share passwords, authentication codes or other security credentials.
  • Use long, unique passwords or passphrases for each account.
  • Use a reputable password manager to create and store credentials securely.
  • Change a password promptly if you suspect it has been compromised.
  • Enable multifactor authentication whenever available.
     

Report Suspected Fraud or Brand Impersonation

The State Street Global Security Control Center is available around the clock for threat or incident escalation. If you believe you have been a victim of an attempted or actual fraud, you can help us investigate further and potentially halt further similar threats by providing information or forwarding suspicious emails you received to State Street using the following contact information:

  • Global Security Control Center (24 x 7 support)
    • email csecurity@statestreet.com
    • call +1 (617) 985 5001 (emergency for US & International)
    • call +1 (617) 985 8475 (non-emergency for US & International)

Report a Security Vulnerability

A security vulnerability is a weakness in a system, network or application that could be exploited to gain unauthorized access, execute malicious code, install malware, disrupt services, or access, destroy or modify data. Use the vulnerability disclosure process below only to report a technical security weakness.

  • Avoid exploitation: Do not attempt to exploit the vulnerability or access unauthorized data. Your cooperation in maintaining security is crucial.
  • Document the threat or vulnerability: Provide a detailed description, including any steps to identify or reproduce it, the potential impact, and any relevant screenshots or logs.
  • Observe all applicable laws and regulations: When performing research activity, do not engage in any activity that violates international, federal or state laws/regulations.

We appreciate your assistance in helping us maintain a secure environment.

Country-Specific Reporting Resources

If you are the target or victim of fraud, consider contacting your local law enforcement and official national cybercrime or fraud-reporting authority in your jurisdiction.