Thoma Bravo (the “Firm”) has become aware that third parties are fraudulently impersonating the Firm and partners and employees of the Firm. These impersonators misappropriate and misuse names, images, photographs, voices and likeness, including digitally manipulated or artificially generated images, videos and audio (commonly referred to as “deepfakes”), to create the false impression that an individual is communicating with the Firm or persons associated with the Firm. The purpose of these schemes is to induce victims to transfer funds or to disclose personal, financial or confidential information.
Neither the Firm nor its partners or employees are affiliated with, sponsor, endorse or bear responsibility for any such communication, or for any losses resulting from these schemes. While the Firm takes these matters seriously, it cannot prevent third parties from engaging in such conduct. The information below is provided for general informational purposes only to help you identify and avoid these schemes, and does not constitute legal, financial or investment advice.
How these schemes operate
- Fake profiles and accounts on social media platforms, messaging applications and websites that use the Firm’s, its partners’ or its employees’ names, photographs or likeness to appear legitimate.
- Digitally manipulated or artificially generated videos, images and voice recordings (“deepfakes”) purporting to depict persons affiliated with the Firm endorsing or offering an investment.
- Unsolicited messages, emails, text messages or telephone calls, frequently transmitted through WhatsApp, Telegram or similar messaging platforms, purporting to originate from Firm personnel.
- Offers of purportedly “high-yield,” “low-risk” or “guaranteed” investments, exclusive funds, or trading groups that do not exist and are in no way affiliated with the Firm.
- A manufactured sense of urgency, secrecy or exclusivity intended to pressure the recipient into acting quickly and to discourage independent verification of the request.
- Requests to remit funds to an unfamiliar bank account, cryptocurrency wallet or payment application, or to disclose personal, financial or login information.
- Fake news articles, press releases, websites or advertisements that use the Firm’s name, brand or logo to lend false credibility to an investment, fund or campaign.
- Fraudulent job offers or recruitment communications that misuse the Firm’s name or logo, purport to offer employment and may request payment or personal information during a supposed hiring process.
How the Firm, its partners and its employees communicate
- The Firm does not solicit investments through WhatsApp, Telegram or other messaging platforms.
- The Firm does not ask you to remit payment to a personal account, cryptocurrency wallet or payment application.
- The Firm does not request your passwords, login credentials or one-time security codes.
Authorized channels
The Firm communicates only through its authorized channels. Any website, email address, social media account or application that is not identified below should be regarded as unauthorized and potentially fraudulent.
The only websites authorized by the Firm are:
The only email domains authorized by the Firm to send and receive correspondence are:
- thomabravo.com
No other website or email domain is authorized by the Firm.
The only social media accounts authorized by the Firm are:
- https://www.linkedin.com/company/thoma-bravo/
- https://www.youtube.com/@thoma-bravo
- https://x.com/thomabravo
- https://www.facebook.com/ThomaBravoOfficial
How to protect yourself
- Exercise caution in response to any unexpected communication that uses the Firm, its partners’ or its employees’ names or images, particularly one that offers an investment or requests funds or personal information.
- Do not rely on the contact details, links or documents contained in a suspicious communication.
- Be aware that a convincing photograph, video or voice recording is not evidence that a communication is genuine.
- Be cautious of unsolicited emails that appear to come from a Firm email address; such messages may be “spoofed” to disguise their true origin. Check sender addresses carefully and correspond only through the authorized domains listed above.
If you believe you have been targeted or defrauded
If you believe you have suffered financial loss or identity theft, you should promptly contact your bank or financial institution and your local law enforcement authorities.
The following is provided for informational purposes only.
United States
- U.S. Securities and Exchange Commission (sec.gov/tcr; investor.gov) — report suspected investment fraud and verify whether a firm or individual is registered.
- Federal Trade Commission (reportfraud.ftc.gov; identitytheft.gov) — report fraud and identity theft.
- FBI Internet Crime Complaint Center — IC3 (ic3.gov) — report internet-enabled crime and online fraud.
- Federal Bureau of Investigation (fbi.gov) — general guidance on scams and cyber threats.
- U.S. Postal Inspection Service (uspis.gov) — report fraud involving the U.S. mail.
United Kingdom and Europe
- Action Fraud (actionfraud.police.uk) — the UK’s national fraud and cybercrime reporting center.
- Financial Conduct Authority – ScamSmart (fca.org.uk/scamsmart) — guidance on validating investment opportunities.
- European Anti-Fraud Office – OLAF (anti-fraud.ec.europa.eu) — reporting for fraud affecting the EU.
Asia-Pacific
- Hong Kong Anti-Deception Coordination Centre (adcc.police.gov.hk) — fraud and deception reporting and assistance.
- Singapore – ScamShield and the Singapore Police Force (scamshield.gov.sg) — report scams and check suspicious contacts.