Phishing campaign targeting university students

Tuesday, 14 June 2016

Thames Valley Police report that university students are being targeted by a new email scam designed to trick people into passing over financial details. 

The phishing campaign targets students of UK universities and claims that the student has been awarded an educational grant by the Department for Education. 

The email purports to have come from the finance department of the student’s university and tricks the recipient into clicking on a link contained in the message to provide personal and banking details. 

 One victim reported that after submitting their sensitive information (including name, address, date of birth, contact details, telephone provider, bank account details, student ID, National Insurance Number, driving licence number and mother’s maiden name), they were taken to a spoofed website which appeared like a genuine website of their bank, where they were asked to type in their online banking login credentials.

Thames Valley Police advise the following:

• Do not click on any links or open attachments contained within unsolicited emails.
• Do not reply to scam emails or contact the senders in any way. 
• If an email appears to have come from a person or organisation you know of but the message is unexpected or unusual, contact them directly via another method to confirm that they sent you the email.
• If you receive an email which asks you to login to an online account via a link provided in the email, instead of clicking on the link, open your browser and go directly to the company’s website yourself.
• If you have clicked on a link in the email, do not supply any information on the website that may open.

Contact your bank immediately if you suspect fraudulent behaviour or feel that your financial security has been compromised. After doing this, report all incidents to Action Fraud by calling 0300 123 2040, or visiting www.actionfraud.police.uk.