Fake Chevron vendor-invitation emails steer suppliers to inquire@chevronprocurements.us

What happened

MalwareTips reports a Chevron vendor invitation email scam that promotes an alleged project opportunity for 2025 and 2026, references a Vendor Questionnaire and an Expression of Interest, and requests supplier participation. The notice directs replies to inquire@chevronprocurements.us and offers a QR code route. MalwareTips says it is not a genuine invitation from Chevron, which is the impersonated company and is not accused. MalwareTips notes no QR destination was decoded and the domain's website root could not be captured.

How the scam works

MalwareTips says the invitation uses a recognised company name to create an attractive sales lead, then project language about 2025 and 2026 opportunities to make it seem timely. Replies go to an address that looks like procurement, inquire@chevronprocurements.us. A name in an address doesn't establish corporate control, and the optional QR route is another way into the process. A questionnaire can feel professional and routine, and each completed step can make a later, more sensitive request harder to challenge.

MalwareTips is careful about what wasn't shown. It did not decode the QR destination, could not capture the domain's website, and did not demonstrate a malicious file, a qualification payment or a completed fraud against a named supplier in this message. It notes that Chevron's own public fraud warning describes procurement impersonation involving qualification fees, but no such payment was seen here.

Chevron is the impersonated company and isn't accused.

Source

MalwareTips, "Chevron Vendor Invitation Email Scam: Fake Procurement And QR Code Bait" (published 26 October 2026).