Before you respond

• Don’t click links or download attachments from suspicious emails.
• Check the sender’s email address closely. Scammers often use misspellings or random characters to mimic real accounts. City staff use official @ci.castle-rock.wa.us email addresses.
• Trust your instincts. If something feels off, it probably is.
• Search online for scams related to the business or agency named in the email.
• Get a second opinion from a trusted friend or family member before you respond.

Verify it with the City

• Never call phone numbers listed in a suspicious email. Find the agency’s real number on a trusted website, like this one.
• Call and ask staff to confirm whether the email is legitimate: Finance Office, (360) 274-8181.
• Share any identifiers. If the email includes names, employee numbers, or other details, give them to staff so they can check whether it’s authentic.
• Never send money, click unfamiliar links, or share personal information with an unverified source.