The most common scams targeting the UB community
With increasing opportunities to hand out our personal information, the number of online scams are skyrocketing. Here's a look at the most common scams affecting UB and the steps you can take to avoid them.
1. Know why scams occur
Scams happen when we provide scammers the chance to access our information.
- Easy access: We willingly provide our personal information on social media all the time. Even taking those innocent-looking “tell us your maiden name and we’ll tell you what you ordered at Starbucks” quizzes can siphon your personal data.
- Poor security: Cyber attackers are able to test billions of password combinations in a second, leaving those of us with weak passwords and no two-step verification vulnerable.
Scammers are also compelled, first and foremost, by financial gain.
- Greed and/or financial difficulties: Most likely, an individual trying to scam you is trying to make easy and fast money.
Why are students overwhelmingly the target of some of these scams? In particular, students comprise 95% of all targets for fake job offers, because students are more likely looking for flexible or remote work opportunities (which conveniently means you'll never meet the person scamming you in person). Students may also be in greater need of a job.
International students are disproporionately targeted as well, because scammers assume international students will be less likely to detect a fraudulent email than those who speak English as a first language.
2. Know the methods scammers use
Phishing is the most common ways scammers gain access to your personal information by trying to establish a relationship or gain your trust. Phishing attempts don't just target email, either. Scammers may use:
- Email attachment and links
- Phone calls
- Pop-up windows
- Direct messages
- Text messages
In particular, look out for:
- Requests for personal information: These may or may not include threats.
- Not being addressed by name: They may use other ways to address you, such as: Customer, Mr./Mrs./Miss, User, etc.
- Spelling and grammatical errors
- The promise of easy rewards or services
Despite the typical spelling and grammar errors, scam emails can look surprisingly legit. Scammers often impersonate large, reputable organizations (even UB!) by taking their logos and branding from another online source to make their scam emails look more official.
Follow the instructions on the UBIT website for reporting a phishing attempt if you think you have received one.
3. Know the most common scams
Fake job scams
Someone contacts you with a “too good to be true” job opportunity: common offers include caregivers, mystery shoppers, administrative assistants, rebate processors or models/influencers. These jobs, while often entry-level, claim to offer great pay, short working hours and lots of flexibility.
Some variations of this scam offer to find you a job placement, or to get you to buy gift cards, bitcoin or other purchases, but these scams use several different tactics.
Fake job scams can appear as though they come from a company, or an individual (for example, you may receive an email asking you for recommendations for a tutor).
Look out for:
- Credit report requests: A company is supposedly impressed by your resume and wants to hire you, but first they need to check your credit score. You may then be directed to a website where they ask for personal information, including name, address, and SSN.
- Job application requests: You are asked to fill out an application for a job. Then, you are directed to a website and asked to provide your personal information.
- Requests for a background check (at your expense): A position has opened up, but you are responsible for paying for the background check, possibly with a pre-paid Visa card.
Ways to stay safe:
- Contact the company directly (use their publicly available contact information) to verify the job offer.
- Your best option is to delete the email without responding or clicking any links or attachments
- If you already responded, cease correspondance
- If the sender requested any action on your part, contact the UBIT Help Center right away
Supervisor/"gift card" scams
You receive an email from someone who claims to be a UB official, or maybe even your supervisor… but isn’t. They need something done quickly, but can’t talk over the phone. Typically, they’ll ask you to buy gift cards for them.
Look out for:
- An inability to talk on the phone: They will claim to be someone you work with, but will only be able to communicate over the phone because they’re in a meeting, or out of the country.
- A guilt strategy: Maybe it’s for their niece’s birthday, and they forgot to get something. If you email them back, you may even receive a long and convincing story to this effect.
Ways to stay safe:
- Always be extra cautious when someone asks you for money, especially over email. Take extra steps to make sure the person is who they say they are.
International students are often the target of this scam, in which someone calls you and threatens deportation unless you give them money immediately. This scam is quite common, and there are easy ways to detect it:
Look out for:
- Phone call: The U.S. government does not conduct immigration business over the phone. If there is an important change in your status, you will receive it in writing.
- Requires immediate payment: You will also typically be notified in advance (usually by writing) if you owe any money to the U.S. government, and will be given a date in the future when the payment is due.
- Payment with gift cards or cryptocurrency: These callers often require you to pay with either gift cards (like Google Play or iTunes) or cryptocurrency (like Bitcoin). Neither are acceptable forms of payment for official government business. Gift cards and cryptocurrency are two forms of payment preferred by scammers, because it is easy for them to take this payment and disappear without being tracked.
Ways to stay safe:
- Call USCIS’s National Customer Service Center at 1-800-375-5283: You can ask questions about immigration and status and get a legitimate answer.
In 2021, the U.S. Internal Revenue Service (IRS) warned that scammers were targeting .edu email addresses with a tax scam where they impersonate the IRS and ask people to click a link and submit a form to claim their refund. These scams use the IRS logo in their email, and various subject lines like "Tax Refund Payment" or "Recalculation of your tax refund payment."
The link in the email leads to a fake IRS site that collects your social security number, date of birth and other information that can be used to fradulently steal your refund.
During tax season, if you're waiting on or unsure of the status of your refund, you should check the IRS' official Where's My Refund? page on IRS.gov.
4. Know what to do if you're a victim
If you think you have been the victim of a scam, there are several steps you should take:
- Change your password of accounts involved in the scam
- Contact and inform your bank
- Contact local police (For members of the University at Buffalo, please contact University Police)
- File a complaint at the Internet Crime Complaint Center