[Students] Financial Aid Fraud Alert - Take Steps to Protect Yourself

[UCR Information Technology Solutions]

[image: UC Riverside logo.]

Dear Highlanders,

The UC Riverside Information Security Office and Financial Aid Office have
received reports of fraudulent emails and text messages targeting UCR
students. These scam messages usually claim that your financial aid is
delayed or that your account requires urgent verification. They often
include links directing you to fake login pages designed to steal your
personal information, login credentials, authentication codes, or financial
details.
Steps to Protect Yourself and Your Aid

   -

   Never share your password or Duo multi-factor authentication (MFA) codes.
   The university will never ask for your NetID password, MFA code, or banking
   details through unsolicited links, text messages, or phone calls.
   -

   Never approve a Duo push unless you initiated the login attempt
   yourself. If you are not expecting a login verification request, it may
   be a bad actor attempting to access your account. Deny the request unless
   you initiated the login.
   -

   Use the Duo Biometric authentication method. Add another layer of
   protection to your UCR account by enrolling in the Duo biometric
   authentication
   <https://ucrsupport.service-now.com/ucr_portal?id=kb_article_view&sysparm_article=KB0012279>.
   This authentication method allows you to log in securely using fingerprint
   readers or facial recognition on compatible devices.
   -

   If being asked to take action, verify directly with the official source.
   Always check your official financial aid status by navigating directly to
   R’Web at rweb.ucr.edu. If you have questions or concerns about a message
   you received regarding your financial aid, contact Student Business
   Services directly:
   -

      Email the office at sbsofc at ucr.edu
      -

      Call the office at (951) 827-3204
      -

      Visit the office in the Student Services Building, room 1111
      -

   Notify the UCR Information Security Office. If you receive a suspicious
   email in your inbox, do not click any links or download attachments. Report
   it immediately using the Report Suspicious button (the hook-and-envelope
   icon) in your UCR Gmail account (watch this video to learn how
   <https://www.youtube.com/watch?v=revwvK9DUBM>).


You can also report suspicious activity by emailing abuse at ucr.edu. If you
suspect your account credentials have been compromised, change your
password immediately and contact ITS BearHelp at (951) 827-4848 or
its.ucr.edu/help.

As we begin a new academic year, remember that you have the power to keep
your information safe. By staying vigilant, trusting your instincts, and
taking advantage of the many campus resources available to support you, you
can protect yourself and our Highlander community.


Sincerely,

Dewight Kramer

Chief Information Security Officer

Information Technology Solutions

Asirra Suguitan

Associate Vice Chancellor and Campus Controller

Business & Financial Services
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://scotmail.ucr.edu/pipermail/students/attachments/20260914/893cd4b6/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image
Type: image/png
Size: 34862 bytes
Desc: not available
URL: <https://scotmail.ucr.edu/pipermail/students/attachments/20260914/893cd4b6/attachment-0001.png>