Campus Students Targeted by E-mail Scam

The campus has been notified that some students are being targeted by e-mails about fake job offers that are an attempt to steal money from students. Specifically, the e-mails attempt to lure students into sending money orders on behalf of their employer after the students receive and deposit checks. The checks are later discovered to be fake. However, when the money orders are received by the criminals, the student’s money has already been stolen.

What to Do With Suspicious or Phishing E-mail

• Legitimate companies do not ask for personal or financial information via e-mail.
• Always be wary of any financial transaction involving a“middleman.”
• If you think you may have responded to a phishing attempt or provided personal or financial information, contact your bank or credit union. Then contact the IT Service Center at 303-735-4357 (5-HELP from a campus phone). Phone hours:  Monday to Thursday, 7:00 a.m. - 10 p.m.; Friday, 7:00 a.m. – 7:00 p.m.; Saturday and Sunday, 12:00 noon – 6:00 p.m.
• If you ever receive a suspicious e-mail, do not reply or click any links within the message.
• If you wish to notify OIT of a suspicious e-mail, you may forward it to IT Security at phish@colorado.edu then delete the e-mail.
• Never forward a suspicious e-mail to other individuals.
• Remember, scams come in many forms in addition to e-mail, such as fliers, phone calls and bulletin board postings.
• Offers that seem too good to be true usually are. Always view offers of money, jobs or something for nothing with suspicion and caution – particularly when the source is unknown.

OIT Security Information

• More tips to avoid phishing:  http://oit.colorado.edu/it-security/security-awareness/phishing
• Identity theft help:  http://oit.colorado.edu/it-security/security-awareness/privacy-identity-theft
• List of reported phishing e-mails:  http://oit.colorado.edu/it-security/email-phishing

Although the university uses technology to block malicious e-mail and phishing Websites, this technology is no substitute for being a conscientious Internet user. If you ever have questions about the legitimacy of a message, please contact the IT Service Center.