Phishing Email Summary
This phishing email uses a fake or spoofed U-M email address. It also contains some factual information to help impersonate a U-M staff person. The message is attempting to gain the trust of the recipient and generate a reply. If you reply, scammers may send additional messages aimed at stealing information or scamming you.
If you receive email from an unknown person using a U-M email address and/or a U-M department name, do not reply.
Use these steps so that you can reply to real U-M or personal business while avoiding scams and phishing:
- Check How to Spot a Spoof. This guide explains how to recognize a spoofed email address.
- Use the MCommunity directory to determine if such a person exists at U-M and if they work in the department they claim to.
- Contact the person using their MCommunity information to see if they really sent the message and why.
An example of this phish received by U-M staff is shown below. Names and email addresses have been removed for security.
Phishing Email Text
I will like to know if you received my previous message concerning the error from the payroll department.
Regards,
......
Fake Name,
Payroll Office
The University of Michigan
G395 Wolverine Tower - Low Rise
Fake @ umich.edu [fake or spoofed email address]