Beware of scammers targeting your college student
Your kid’s friendly emails may be phishing for personal details
HVP Staff
The Federal Trade Commission is warning parents that their college student may be a target for obtaining passwords, logins and usernames. In a recent Consumer Information announcement, the FTC offers ways to know if the email is a fake.
It may come from the “Financial Department” of your student’s university. The email tells you to click on a link to get a message about your COVID-19 economic stimulus check — and it needs to be opened through a portal link requiring your university login. Don’t do it. It’s a phishing scam.
If you click to “log in,” you could be giving your username, password, or other personal information to scammers, while possibly downloading malware onto your device.
How can you spot and avoid scams like these? Before you click on a link or share any of your sensitive information:
- Check it out. If you have concerns about an email, contact the sender directly. Look up their phone number or website yourself. Don’t click on a link. That way, you’ll know you’re not about to call a scammer or follow a link that will download malware.
- Take a closer look. While some phishing emails look completely legit, bad grammar and spelling can be a tip-off to phishing. Another clue that the email is not really from your school: they use the wrong department name. In one example we’ve seen, the scammers called themselves the Financial Dept instead of the Financial Aid Department.
If you spot something that looks like a phishing scam, report it. Forward the message to the Anti-Phishing Working Group (an organization which includes ISPs, security vendors, financial institutions, and law enforcement agencies) at reportphishing@apwg.org. You can also report phishing to the FTC at ftc.gov/complaint.