QR Code Scam (09/19/2023)

Learn about a new phish or scam.

Description of the phish / scam

An email pretending to be from UB's HR department or some other authoritative entity claims that Human Resource/Payroll shared a file with you and contains a QR code. It claims you need to scan the QR code with the camera program on your mobile device to access your files.

How you can tell it is a scam

  • The email address in the from field is not a UB email address and does not match the name.
  • HR/Payroll is not in the habit of sharing files with large groups of people via QR codes. All individuals should be going to the official HR/Payroll web pages to access related information.
  • The subject of the email contains random words and/or typos e.g. "University At Buffaloschool Of Management Employee Benefits Plan for The Year 2023/2024" or "salary augmentation, bonus allocation, compensation adjustment, insurance revision, and the updating of the benefit package for username"

I think I have been scammed. What should I do?

If you've entered your UBITName and password, change your password immediately.  Contact the UBIT Help Center if you need assistance.