How to recognise scams and phishing using EMA credentials

The European Medicines Agency (EMA) is aware of cases where fraudulent third parties using EMA’s credentials approach citizens to request money or send phishing emails that appear to come from EMA but in fact contain malicious links or attachments.
Corporate

Spanish is available via eTranslation, the European Commission's machine translation service.

Translate to Spanish | Important information about machine translation

EMA does not ask citizens for payment of any sort and does not send unsolicited communication.

We interact with companies and individuals on the basis of regulatory procedures we are responsible for.

For answers to frequently asked questions about EMA's work and scope, see:

What you can do to avoid and report scams

Be vigilant for fake invoices, emails or phone calls impersonating EMA and requesting money transfers.

They can be scamming attempts. 

They usually include EMA credentials like our name, emails, logo and even names of members of our staff.

EMA will never ask citizens for payment of any sort.

If you ever come across any such scamming attempt, consider reporting it to your national authorities competent for crimes and / or cybercrime.

What you can do to avoid falling for phishing attempts

Phishing is a form of online fraud in which senders pretend to be a trusted entity to obtain personal information, financial data or access codes.

EMA has identified phishing attempts where the sender pretends to work for EMA.

If you receive a suspicious email:

  • do not to click on any links included in that email;
  • do not open attachments enclosed in that email;
  • do not reply to that email;
  • do not share any financial or confidential information with the sender.

If necessary, follow up with EMA to confirm that the email is legitimate. 

Remember that EMA never sends any unsolicited communication.

Stay informed about scams, phishing and other evolving social engineering practices.

EMA's responsibilities

EMA carries out scientific evaluation of new medicines meant for the EU market. 

It also issues recommendations on whether or not new medicines can be marketed in the EU.

We also monitor the safety of all medicines already on the EU market.

Furthermore, we have a duty to respond to any query we receive.

EMA’s interactions with companies and individuals are often linked to these regulatory procedures.

To better understand what EMA does, see:

Page update history

An update log is available to show the date and summary of changes to this webpage. It does not include updates to linked documents or minor edits like typos or broken link fixes.

The tracking of updates begins in June 2026.

18 June 2026

  • Section on 'What you can do to avoid falling for phishing attempts' added
  • Title and other areas of this web page updated to reflect the section on phishing attempts

Share this page