In an increasingly connected business environment, trust has become one of the most important assets of any institution.For a global investment, advisory and business group such as Aura Solution Company Limited, that trust extends beyond financial and commercial relationships. It encompasses the integrity of the Aura name, the confidence of our clients and counterparties, the security of our communications, and the protection of the individuals and organizations with whom we work.Unfortunately, established corporate names can also become targets for fraud and impersonation.Individuals and organized groups may attempt to misuse the Aura name, corporate identity, websites, logos, documents, employee identities or other publicly available information in order to create the appearance of a legitimate relationship with Aura.

​

These activities may take many forms. They may involve fraudulent investment proposals, false employment opportunities, phishing emails, telephone scams, fake websites, impersonation of executives or employees, fraudulent payment instructions, counterfeit documents or unauthorized social-media and messaging accounts.Such schemes can be sophisticated. They may use professional language, genuine photographs, copied corporate information and convincing documentation. In some cases, a fraudulent communication may appear almost indistinguishable from a legitimate business communication at first sight.​ For this reason, verification should always take precedence over appearance.This article explains the principal forms of fraud and impersonation associated with corporate identity theft and provides guidance for clients, business partners, candidates and members of the public who receive communications claiming to originate from Aura.

 

The Principle of Independent Verification

The most important safeguard against fraud is simple:

• Do not act on an important request until you have independently verified its source.

• Fraudsters frequently rely on urgency.

 

A recipient may be told that an investment opportunity is available for only a limited period, that a payment must be completed immediately, that banking details have changed, or that confidential information is required without delay.The purpose of this pressure is often to prevent the recipient from taking the time to question the request.A legitimate business communication should not require a recipient to abandon reasonable verification procedures.When a communication involves money, confidential information, account access or a significant business decision, take the time to verify the person, the communication and the instruction through an independent and trusted channel.

 

Pause. Examine. Verify. Then act.

 

Official Aura Information

The principal source of official information concerning Aura is:

 

www.aura.co.th

 

For general corporate enquiries:

When checking whether a communication is genuine, access the Aura website independently rather than following a link contained in an unexpected email, message or document.

Similarly, do not rely solely on a telephone number, email address or messaging account provided by the person contacting you.A fraudulent party may deliberately provide contact information that appears legitimate but is controlled by the fraudster.The safest approach is to obtain the contact information independently from an official Aura source.

 

Why Corporate Impersonation Works

Modern fraud does not necessarily look fraudulent.

A sophisticated impersonator may first research the organization and the person they intend to contact. Public information from websites, business directories, professional profiles, press articles and social-media platforms can provide enough information to construct a convincing story.

 

The fraudster may know:

• The name of a senior executive;

• The names of employees;

• The company's business activities;

• The names of clients or counterparties;

• The company's office locations;

• The appearance of corporate documents;

• The organization's branding; or

• The nature of an ongoing business relationship.

 

This information can then be used to create a communication that appears credible.The important point is that knowledge of genuine corporate information does not prove that the person contacting you is genuine.

 

Investment and Financial Fraud

Investment fraud is among the most serious forms of corporate impersonation.A fraudster may claim to represent Aura or to have access to an Aura investment, private transaction or exclusive financial opportunity.The proposal may be presented through a formal-looking investment memorandum, presentation, term sheet, agreement or website.It may promise unusually attractive returns or suggest that the opportunity is available only to a small number of selected investors.

 

Warning signs may include promises of:

• Guaranteed returns;

• Unusually high yields;

• Risk-free investment;

• Immediate profits;

• Exclusive access;

• Confidential investment opportunities;

• Guaranteed allocation;

• Special treatment for selected clients; or

• Pressure to transfer funds quickly.

 

The appearance of professional documentation does not establish authenticity.Fraudsters can reproduce logos, signatures, corporate terminology and other visual elements with considerable accuracy.Anyone receiving an unexpected investment proposal claiming to originate from Aura should independently verify the identity of the sender and the nature of the opportunity before providing information or transferring funds.

 

Phishing Through Email and Messages

Phishing is one of the most common methods used to obtain sensitive information.A phishing message may appear to come from an Aura employee or another trusted organization and may contain a link, attachment or request for information.The message may ask the recipient to confirm an account, review a document, update information, complete a payment or respond to an urgent request.The link may lead to a fraudulent website designed to capture usernames, passwords, payment information or other confidential data.Attachments may also contain malicious software.

​

Particular care should therefore be taken with unexpected communications containing:

• Login requests;

• Payment instructions;

• Password-reset requests;

• Unexpected documents;

• Account-verification requests;

• Links to unfamiliar websites;

• Software or application downloads; or

• Requests for confidential information.

Before clicking a link, examine the destination carefully. If there is any uncertainty, access the relevant website independently rather than using the link provided in the message.

 

Telephone and Voice Fraud

Fraud is not limited to written communications.Vishing, or voice phishing, involves telephone calls in which a fraudster attempts to obtain information or induce a financial transaction by pretending to represent a trusted organization.

 

The caller may claim to be:

• An Aura executive;

• An Aura employee;

• An adviser;

• A financial institution;

• A regulator;

• A government authority; or

• Another trusted organization.

 

The caller may attempt to create pressure by claiming that immediate action is required.A telephone conversation should never be considered sufficient evidence of identity.If a caller requests confidential information, authentication codes, banking information or an immediate financial transaction, end the conversation if necessary and independently contact the relevant organization using a trusted number.

 

Payment and Banking Fraud

Payment fraud often takes advantage of established business relationships.A fraudster may impersonate an executive, employee, supplier or business partner and claim that payment instructions have changed.The request may appear to be a routine administrative update.However, a change in bank-account information can have significant consequences.Any new or amended payment instruction should be independently verified before funds are transferred.

 

This is particularly important where:

• A bank account has changed;

• The beneficiary name has changed;

• A new payment destination is introduced;

• The request is unusually urgent;

• The request comes from an unfamiliar address;

• The sender asks that normal verification procedures be bypassed; or

• The communication requests secrecy.

Never treat an email containing revised payment details as sufficient confirmation of the change.

 

Executive and Employee Impersonation

Another increasingly common form of fraud involves impersonating senior executives or employees.A fraudster may use the name and photograph of a genuine Aura executive and contact a client or business partner.The impersonator may claim to be travelling, unavailable by telephone or involved in a confidential transaction.They may then request that a payment be made, information be disclosed or an unusual action be taken.The fact that the request appears to come from a senior person should not reduce the level of verification required.In fact, requests involving significant financial or confidential matters should receive greater scrutiny, regardless of the apparent seniority of the person making the request.

 

Recruitment and Employment Fraud

Corporate identity can also be misused to create fraudulent employment opportunities.An individual may receive an apparently genuine offer to work for Aura or an invitation to participate in a recruitment process.After establishing contact, the fraudster may request money for recruitment, administration, training, equipment, visas or other purposes.They may also request identity documents, banking information or other personal information.Aura does not require candidates to pay a fee in order to apply for employment.Candidates should independently verify employment opportunities through official Aura channels before providing personal information, signing documents or making any payment.An unsolicited employment offer should always be treated with caution when it involves financial requests or unofficial communication channels.

 

Fake Websites and Domains

A fraudulent website may be one of the most convincing elements of an impersonation scheme.Fraudsters can reproduce corporate colours, logos, photographs, language and page layouts to create a website that appears legitimate.The difference may exist only in the domain name.For this reason, clients and visitors should pay close attention to the website address.

​

The official Aura website is:

www.aura.co.th

Be cautious of addresses containing:

• Additional words;

• Unusual characters;

• Spelling variations;

• Different domain extensions;

• Hyphens or additional symbols; or

• Domains that merely resemble the official address.

When in doubt, type the official address into your browser directly rather than following an unsolicited link.

 

Social Media and Online Impersonation

Social-media platforms can provide fraudsters with another means of establishing credibility.A fraudulent account may use the Aura name, corporate logo, employee photographs or information taken from legitimate sources.Such an account may then contact individuals privately with investment proposals, recruitment offers or business opportunities.Aura does not operate official corporate accounts on conventional social-media platforms such as Facebook, X, LinkedIn or Instagram.Accordingly, a social-media account using the Aura name should not automatically be regarded as an official Aura channel.Particular caution should be exercised when an account contacts you unexpectedly and asks for money, confidential information or immediate action.

 

WhatsApp Communications

Aura may use WhatsApp for appropriate communications with selected clients where a direct and efficient channel is required.However, the use of the Aura name or logo by a WhatsApp account does not, by itself, establish that the account is genuine.Where applicable, clients should look for the official WhatsApp verification badge associated with Aura's authorized account.The verification badge should be considered alongside the nature of the communication and the request being made.For significant financial transactions, changes to payment instructions or requests for confidential information, clients should also independently confirm the matter through an established Aura contact channel.

A verified communication channel should never be interpreted as a reason to abandon normal security procedures.

​

Recognizing the Warning Signs

Fraudulent communications often contain several indicators.

 

These may include:

Unusual urgency

 

You are told that immediate action is required and that there is no time for verification.

Financial pressure

 

You are asked to transfer funds immediately or to a new or unfamiliar account.

Requests for secrecy

 

You are asked not to discuss the request with colleagues, advisers, banks or other representatives.

Unusual contact details

 

The email address, telephone number, website or messaging account does not correspond with information obtained independently.

Suspicious links

 

A link appears familiar but directs you to an unexpected or unfamiliar website.

Unexpected attachments

 

You receive a document or file that you were not expecting.

Requests for security credentials

 

You are asked for a password, authentication code, security token or other confidential credential.

Unsolicited investment opportunities

 

You are approached unexpectedly with an investment proposal claiming to be associated with Aura.

Unofficial recruitment

 

You are offered employment through an unverified platform or asked to pay money as part of the recruitment process.

None of these indicators necessarily proves that a communication is fraudulent. However, several warning signs occurring together should be treated as a reason to stop and verify.

 

Protecting Your Information

Good security practices remain one of the most effective defenses against fraud.

 

Never disclose passwords, authentication codes, security tokens or similar credentials in response to an unsolicited request.

​

Aura will not ask you to disclose your password or authentication code through an unsolicited communication.

 

• Do not install software, applications or browser extensions supplied through unexpected messages.

• Do not open suspicious attachments.

• Do not enter confidential information into a website simply because the website looks professional.

• And do not assume that a person is genuine simply because they know information about you or your organization.

 

If You Suspect Fraud

If you receive a communication that you believe may be fraudulent, the first step is simple:

 

STOP

• Do not continue the conversation merely to determine whether the person is genuine.

• Do not click additional links.

• Do not open suspicious attachments.

• Do not provide additional information.

• Do not transfer funds.

Instead, preserve the evidence and begin an independent verification process.Relevant evidence may include emails, complete sender information, WhatsApp messages, telephone numbers, website addresses, screenshots, documents, invoices, investment proposals, payment instructions and transaction references.This information may assist Aura, financial institutions, technology platforms or relevant authorities in determining the nature and origin of the activity.

 

If You Have Already Transferred Funds

If funds have already been transferred as a result of suspected fraud, contact your bank or relevant financial institution immediately.Provide the institution with as much information as possible, including the transaction date, amount, recipient account, transaction reference and the communications that led to the payment.Do not delay simply because you are uncertain whether the transaction was fraudulent.Where appropriate, also report the incident to the relevant platform or competent authority.

 

If You Have Disclosed Personal Information

Fraudsters may seek personal information even when there is no immediate financial transaction.Information obtained through phishing or impersonation may later be used to access accounts, conduct further impersonation or facilitate financial fraud.If you have disclosed sensitive information, take appropriate steps to secure the affected account or service.

This may include changing compromised passwords, strengthening authentication, contacting your bank or relevant service provider and monitoring accounts for unusual activity.

Do not provide further information to the person who originally requested it.

 

Reporting Fraudulent Use of the Aura Name

Fraudulent websites, social-media accounts, WhatsApp accounts, email addresses and other communications using the Aura name should be treated seriously.Where appropriate, suspicious activity may be reported to the relevant platform, financial institution or competent authority.If you believe that a communication falsely represents itself as originating from Aura, you may also contact Aura through its independently verified official channels.

 

Official Website: www.aura.co.th

 

General Enquiries:

When contacting Aura, do not use contact information supplied by the suspected fraudster. Obtain the relevant contact details independently.

 

Protecting Trust

• The protection of a corporate identity is ultimately about protecting trust.

• Aura's name represents relationships built over time with clients, counterparties, employees, advisers and other stakeholders. Unauthorized use of that identity can create confusion and expose individuals and organizations to financial and personal risk.

• Aura therefore encourages everyone who encounters a communication bearing the Aura name to exercise appropriate care.

• A professional appearance is not proof of authenticity.

• A familiar name is not proof of identity.

• A corporate logo is not proof of authorization.

• A convincing document is not proof of legitimacy.

• Verification is what establishes trust.

 

A Simple Rule

When a person claims to represent Aura, consider five questions:

 

• Who is contacting me?

• How do I know they are who they say they are?

• Is the website, email address or account genuinely associated with Aura?

• Is the request consistent with the nature of the relationship?

• Have I independently verified the request before acting?

• If the answer to any of these questions is uncertain, pause before proceeding.

 

Official Aura Contact

Aura Solution Company Limited

www.aura.co.th

For official corporate information, always begin with Aura's official website and use independently verified contact information.

If in doubt, stop, verify independently, and only then proceed.

© 2026 Aura Solution Company Limited. All rights reserved.