City officials in Oldsmar are asking people to check their e-mail accounts and delete any messages with the attachment, "Contract Service Final."
They say although the e-mail looks like it was sent from one of their employees and seems legitimate, it's a phishing attempt and was not sent from them.
"If you look carefully, you can usually tell,” said Al Braithwaite, the Oldsmar City manager.
One neighbor posted pictures to the NextDoor app, warning others that his anti-malware caught the suspicious e-mail. He says when you click on the link it sends you to a website flagged by his software as a, "critical security risk.”
After posting to the app, other neighbors started commenting... saying they've also received the e-mail multiple times.
"Somebody who might want to do this picks up a domain name that’s really close to ours and runs with it and I think that’s what it kind of happened. We don’t know who it is obviously and we can’t control it but all we can do is contain it,” said Braithwaite.
If you have questions about an e-mail you think could be a phishing attempt, call the city manager and report it at 813-749-1100.