Security alert: Scammers posing as BPI staff are sending emails with likely malicious links and attachments. Legitimate emails from BPI staff only come from one domain — btcpolicy[.]org Do not click links, open attachments, or reply to emails from any other senders. Report them as phishing. The malicious emails were sent from btcpolicyinstitute[.]org, which is not affiliated with BPI. Always check the full sender address, not just the display name. At this time, we have no evidence that BPI’s systems or staff email accounts have been compromised. If you've received one of these messages, please reach out to contact@btcpolicy.org. We apologize for any confusion this has caused and thank everyone who brought these messages to our attention.