National authorities have reported that they are receiving fake emails from ECHA with links to malicious content. These emails are not from ECHA but caused by Emotet malware campaign.
If you have received an email from ECHA, please check the sender address. In the malicious emails, the name of the sender is shown correctly, but the actual email address of the sender shows something completely different. If you receive this type of email, please do not open any links or attachments that may be included in the messages and do not reply to the messages.