Urgent: Payroll Document Ready for Review

Date Sent

The email below leads to a series of pages designed to steal your login credentials and use the access to make direct deposit changes to your U-M account. The phishing prompts ask you to:

  1. Select your email provider to sign in to access a file.
  2. Enter your email address and password.
  3. Enter your telephone number.
  4. Enter a Duo SMS passcode, which is sent to your phone in real-time when the threat actor uses your password.

Do not respond and do not enter any login information. In general, do not log into any forms that do not present the official U-M Weblogin page.

Phishing email text

From: Payroll Office University of Michigan <[uniqname redacted]@umich.edu>

Subject: Urgent: Payroll Document Ready for Review

An important payroll document requiring your immediate attention has been securely shared with you via Dropbox. Open file

Phishing Email or Site Screenshot
Sign in for file access. Select Your E-Mail Provider

Some U-M community members reported receiving this email. It is fraudulent or malicious. Do not respond, click any link in it, or provide personal information or money. See Phishing & Scams for more tips. If you need help, contact the ITS Service Center.