Why this looks valid

• This email appears to be from President Weinman
• Sometimes these emails include an exact replica of the individual's email signature
• The email is personally addressed to Marist College payroll personnel

Why this is fraud

• The originating email address is not a Marist College address
• Direct Deposit changes can only be made through offical Human Resources forms

Additional notes

• This is a very common scam - cyber criminals are primarily out to steal money in any way they can, and diverting paychecks is a very common tactic
• A phone call to the alleged sender would quickly verify if this is a legitimate email - it only takes a few minutes to pick up the phone!
• This scam has been occuring for many years, and the FBI distrubuted a warning in 2018: Cybercriminals Utilize Social Engineering Techniques To Obtain Employee Credentials To Conduct Payroll Diversion
• Tip: login to your bank every pay day to ensure your own direct deposit is always correct
• Remember to always send suspicious email messages to phishing@marist.edu - timely reporting helps keep the entire Marist College community safe from cyber criminals!