How to spot and avoid scam emails

An 18-year-old man in Trout Hall responded to a job posting from a scam email Sept. 23. He received a fraudulent check for his first week of work from the supposed employer and deposited it. 

Before the check was cleared by the bank, he was instructed to withdraw cash and deposit it into a Bitcoin ATM. By the time his bank rejected the fraudulent check, the man had already been scammed out of $3,950. 

At this point, the Central Michigan University Police Department can’t do much, and it’s unlikely the bank will forgive the balance. This incident appeared in the Oct. 2 installment of the CMUPD crime log.

In 2019, CMUPD reported 20 incidents of fraud. Halfway into the 2020 fall semester, CMUPD has already received five reports. 

These numbers may seem low but they do not represent every incident – only the cases that are reported to CMUPD.

According to CMUPD Lt. Michael Sienkiewicz, the three main scams CMUPD sees are:

• The “bad check”: Victims respond to a job offer, are given a fraudulent check and pressured into sending a part of their “salary” to the scammer before the fraudulent check bounces.
• Scratch-off gift cards: Victims receive emails from people they know, whose accounts have been hacked. The sender, often times pretending to be an employer, instructs the victim to buy gift cards, scratch off the numbers and email them back photos of the codes.
• Extortion for nude pictures: Victims send someone nude photos through social media and are blackmailed into giving money to the scammer, who threatens to release or share their photos on the internet.

Phishing, which goes hand-in-hand with such scams, often appears in the form of an urgent notice from the “university” that your account has been compromised. This notice includes a link that take a person to what appears to be a CMU login page. When people put in their username and password, the scammer will use that information to access the victims’ accounts and start sending other spam emails.

Below is an example of a phishing scam and some few red flags to spot it:

In order to address phishing, the Office of Information Technology is implementing multi-factor authentication…