The Office of the Data Protection Authority says a series of fake telecoms bills are being sent to islanders.
The ODPA says scammers, claiming to be from Sure, are targeting older CWGSY email accounts.
They mimic the legitimate billing template 'quite convincingly', and prompt users to click on a link to view their bill online - but this takes them to a fake payment portal or downloads malware.
Bailiwick Data Protection Commissioner Brent Homan says islanders should be vigilant and look out for friends or family who are less tech-literate.
“Email phishing attempts from fraudsters spoofing legitimate service providers are a common tactic used to steal your data and money.
“Pausing to ‘think before you click’ can help protect you against such scams.”
Sure has published guidance in response.
It says official emails will use your name, rather than generic “Sir/Madam” or “customer” greetings, and include your customer number.

Flood warnings in place for next 24 hours
Alderney Literary Festival cancelled
Guernsey businesses brave access issues
Relationships between Guernsey, Alderney and Sark to be reviewed
Healthy heart initiative launches at Guernsey Library
Group to examine the complaints process of Guernsey's health service
Dornier aircraft lands in Guernsey for the final time
£130,000 needed to treat Guernsey toddler's brain injury