The City of Novato is alerting residents, property owners and businesses to be aware of an ongoing phishing scam targeting individuals involved in planning, building and permitting processes. Similar incidents are affecting government agencies nationwide, and some applicants in Novato have been impacted.

Cybercriminals are impersonating City staff to solicit fraudulent payments via email, using publicly available permit information to make their messages appear legitimate.

What’s happening:

Scammers send emails that include real permit details such as:

• Property addresses
• Case numbers
• Names of City officials

Messages often:

• Request payment for permit-related fees
• Include PDF invoices with supposed charges
• Use official logos, letterhead and professional language
• Create urgency by threatening project delays

Payment is typically requested via:

• Wire transfer
• Peer-to-peer payment apps
• Cryptocurrency

How to protect yourself:

Always check the sender’s email address carefully.

• Official City of Novato emails will always end in “@novato.gov” (e.g. permitinfo@novato.gov; planning@novato.gov; building@novato.gov)
• Legitimate Permit Portal emails will come from MaintStar: noreply.novato@maintstar.co

Do not rely on appearance alone.

• Scammers can replicate City letterhead, logos and formatting
• Emails may reference real projects, permits or staff names

Do not click links or send money via email.

• The City will never request permit payments through email

Confirm requests directly with the City.

• Use verified phone numbers or official contact information at novato.gov/contactus

Important reminder: The City of Novato only accepts permit payments through the City of Novato Permit Portal or in person at City of Novato Administrative Offices.

The City urges all residents and business owners to remain vigilant, exercise caution, and verify the legitimacy of any unexpected payment requests directly with City staff through official contact channels.