PHISHING SCAM: 9/1/18
Email messages that appear to come from a “[email protected]” email address at Penn State University with the subject line "**Your Refund Has Been Processed*" are being sent to random individuals at Penn State. The email indicates that “a refund has been generated from your student account. Due to federal and other financial aid regulations, students may receive refunds even though they have unpaid tuition, fees, or other charges.” The email includes a link to a fake “View Information” link and is signed by Bursar Account Management.
What can you do?
If you received one of these messages (see an example shown below), simply delete the email. DO NOT click on the link, provide any information, or respond to the email. This is a phishing email that was not sent by Penn State and the link leads to a bogus site. If you did click on the link and entered your Penn State password, you should immediately go to the Penn State Password Management site at: https://www.work.psu.edu/password/change.cgi?path=3 and reset your Penn State password.
If you clicked on the email and entered any credit card or bank information, immediate contact those institutions and change any passwords they may have with those institutions.
More information on phishing attempts is available on the Office of Information Security phishing website.