[Students] Beware of Fraudulent Emails and Text Messages Targeting Students

[UCR Information Technology Solutions]

[image: UC Riverside logo.]
Beware of Fraudulent Emails and Text Messages Targeting Students

Campus is experiencing an increase in fraudulent emails and text messages
targeting students. UCR will never ask for your NetID password, MFA code,
or banking details through unsolicited links, text messages, or phone
calls. Please review the guidance shared last month on how to best protect
yourself. For additional guidance, visit the ITS Cybersmart webpage at
its.ucr.edu/cybersmart.

Dear Highlanders,

The UC Riverside Information Security Office and Financial Aid Office have
received reports of fraudulent emails and text messages targeting UCR
students. These scam messages usually claim that your financial aid is
delayed or that your account requires urgent verification. They often
include links directing you to fake login pages designed to steal your
personal information, login credentials, authentication codes, or financial
details.
Steps to Protect Yourself

   -

   Never share your password or Duo multi-factor authentication (MFA) codes.
   The university will never ask for your NetID password, MFA code, or banking
   details through unsolicited links, text messages, or phone calls.
   -

   Never approve a Duo push unless you initiated the login attempt
   yourself. If you are not expecting a login verification request, it may
   be a bad actor attempting to access your account. Deny the request unless
   you initiated the login.
   -

   Use the Duo Biometric authentication method. Add another layer of
   protection to your UCR account by enrolling in the Duo biometric
   authentication
   <https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012279>.
   This authentication method allows you to log in securely using fingerprint
   readers or facial recognition on compatible devices.
   -

   If being asked to take action, verify directly with the official source. If
   being asked to make changes to your UCR account, contact ITS BearHelp
   directly at (951) 827-4848 or its.ucr.edu/help. Always check your
   official financial aid status by navigating directly to R’Web at
   rweb.ucr.edu. If you have questions or concerns about a message you
   received regarding your financial aid, contact Student Business Services
   directly:
   -

      Email the office at sbsofc at ucr.edu
      -

      Call the office at (951) 827-3204
      -

      Visit the office in the Student Services Building, room 1111
      -

   Notify the UCR Information Security Office. If you receive a suspicious
   email in your inbox, do not click any links or download attachments. Report
   it immediately using the Report Suspicious button (the hook-and-envelope
   icon) in your UCR Gmail account (watch this YouTube video to learn how
   <https://www.youtube.com/watch?v=revwvK9DUBM>).


You can also report suspicious activity by emailing abuse at ucr.edu. If you
suspect your account credentials have been compromised, change your
password immediately and contact ITS BearHelp at (951) 827-4848 or
its.ucr.edu/help.

As we begin a new academic year, remember that you have the power to keep
your information safe. By staying vigilant, trusting your instincts, and
taking advantage of the many campus resources available to support you, you
can protect yourself and our Highlander community.


Sincerely,

Dewight Kramer

Chief Information Security Officer

Information Technology Solutions

Asirra Suguitan

Associate Vice Chancellor and Campus Controller

Business & Financial Services



For additional guidance, visit the ITS Cybersmart webpage at
its.ucr.edu/cybersmart.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://scotmail.ucr.edu/pipermail/students/attachments/20261013/d369a454/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/png
Size: 34862 bytes
Desc: not available
URL: <https://scotmail.ucr.edu/pipermail/students/attachments/20261013/d369a454/attachment-0001.png>