Tax season is upon us, making it an opportune time for scammers to attempt to defraud you. Cybercriminals frequently disguise themselves as Payroll offices/officials by sending emails that contain calls for action, such as requests for you to verify tax information, update direct deposit accounts, print and cash checks, and/or visit a website that is not owned by UConn or the State.
UConn’s Payroll Department and Information Security Team want to help you to avoid identity theft, financial loss and other harmful consequences of phishing attacks with these tips and reminders:
- UConn Payroll does not send any emails asking you to provide your full credentials, or to access non-UConn supported systems. Be wary of email requests from Payroll that are outside the norm. If something doesn’t seem legitimate, always ask before acting. Usually your gut reaction is the right reaction.
- UConn Payroll does not send out unsolicited emails asking you to directly click a link, open an attachment, or provide your credentials. Be wary of email requests from Payroll that are unusual.
- If you receive an email with the alert *Message Sent from Outside of UConn*, review it carefully. While some emails with this alert may contain legitimate University business, many do not. Refrain from directly clicking a link within an email. Instead, access your account by typing a website directly into your browser URL rather than clicking an embedded link.
- UConn officials will never ask you to take the conversation offline. Don’t respond to emails that request you to get in touch over text message or by some other unexpected communication method.
- Do not accept a Duo push that you did not initiate because it means that someone else is attempting to log into your account. Deny the push, report it to ITS, and update your NetID password.
- Never allow your browser to save your log in credentials. Always sign out of systems such as Core-CT when you have finished transacting, and lock your computer if you need to step away from it.
Please report any suspicious payroll emails to payroll@uconn.edu and reportphishing@uconn.edu.