¸£Àû¼§

Common University Scams

Scammers often target students, faculty, and staff with messages designed to steal personal information, passwords, or money. Watch for these common scams and know what to do if something seems suspicious.

• Fake job offers: Be cautious of emails offering “work from home,” “personal assistant,” or “research aid” jobs that promise high pay for very little work. Scammers may send a fake check, ask you to buy equipment, and then disappear.
• Financial aid refund scams: Messages claiming your refund or disbursement is ready may ask you to verify your identity on a non-university website. Never enter your Social Security number, bank login, or password through an unfamiliar link.
• Tech support scares: Pop-ups or emails may claim your account has a virus and urge you to download software. These downloads may contain malware.
• Group chat scams: Scammers may join group chats to promote fake ticket sales, housing sublets, giveaways, or other too-good-to-be-true offers.

How to Spot a Scam

• Urgent language: Scammers try to pressure you with phrases like “Account Suspended,” “Immediate Action Required,” or “Final Notice.” Slow down before you click.
• Suspicious sender: Check the actual email address, not just the display name. If the message claims to be from a university office but comes from a random or unfamiliar address, treat it as suspicious.
• Unusual links: Hover over links before clicking. If the address looks unfamiliar, misspelled, or unrelated to the university, do not open it.

If You Think You Fell for a Scam

If you clicked a suspicious link, shared your password, or approved an MFA request you did not initiate, take action right away. Quick reporting helps protect your account and the university community.

• Change your passwords: Update your university password immediately. Also change passwords for any personal accounts that use the same or a similar password.
• Use MFA: Turn on Multi-Factor Authentication wherever possible. MFA helps protect your accounts even if someone has your password.
• Report the scam: Forward suspicious emails or messages to the IT Security team so they can investigate and help protect others.
• Review MFA prompts carefully: Before approving a request, confirm that the location, device, and timing match your own login attempt. If the request is not yours, deny it and report it.