Iowa State University

ITInformation Technology

Scam Targeting Campus Organization Officers – Money Transfers

This news item expired June 2, 2017. It may contain out-of-date information.

This is an alert regarding a scam targeting campus organizations at Iowa State.  The scam attempts to convince a club treasurer to withdraw money from the club account.

 

How the Scam Works:

A single e-mail is sent to the club treasurer that appears to come from the club’s president. However, the scammer is the actual sender, and is merely forging the “sent from” email address. Replying to these messages will send an email to the scammer, not the club president.

The scammer is methodically sending e-mail to ISU Club treasurers.  If you are a club treasurer, it is likely that you will receive a fake e-mail that appears to come from your club president asking to transfer money.

 

What you can do:

  1. There is no need to reply to the scammer, and you should not do so.
  2. The best practice for handling any club-money transfer requests sent via email is to call your club president on the telephone and ensure the request is legitimate. It takes just a few minutes to make sure a request is real; it can take hours to report a theft. Always play it safe and validate.

The Campus Organizations Accounting Office has also released an alert about this scam. You can read the alert and view an example of the scam email by visiting their homepage.

If you have made no payments to the scammer, you can safely forward the email to abuse@iastate.edu, then delete it.

If you believe you have fallen victim to this scam, please contact the Iowa State University Department of Public Safety at (515) 294-4428.

 

Stay safe,

David Cotton

Chief Information Security Officer