This is a warning to be extra vigilant, due to a current phishing scam which is targeting UK universities.
What is it?
An email scam, claiming that you have been awarded an educational grant from the Department of Education.
Who does it claim to be from?
The email claims to be from the finance department of your university, and is designed to look like it comes from your institution.
How can they scam me?
The email tricks the recipient into clicking a link within the message, to provide personal and banking details. One victim reported that after providing sensitive information about themselves (name, address, date of birth, student ID, bank details, telephone provider, National Insurance Number, driving license number and mother’s maiden name), they were then taken to a fake web page that looked like a genuine website for their bank. From here they were asked to type in their online banking details.
Please follow the advice below from Action Fraud:
- Do not click on any links or open attachments contained within unsolicited emails.
- Do not reply to scam emails or contact the senders in any way.
- If an email appears to have come from a person or organisation you know of but the message is unexpected or unusual, contact them directly via another method to confirm that they sent you the email.
- If you receive an email which asks you to login to an online account via a link provided in the email, instead of clicking on the link, open your browser and go directly to the company’s website yourself.
- If you have clicked on a link in the email, do not supply any information on the website that may open.
If you think you may have compromised the safety of your bank details and/or have lost money due to fraudulent misuse of your cards, you should immediately contact your bank, and report it to Action Fraud by calling 0300 123 2040, or visiting www.actionfraud.police.uk.