An image of a letter being caught by a fishing pole with the text "Gone Phishing"

Menu Display


Asset Publisher

FRAUD: Friday, Aug 5, 2022 (payroll scam)


Why this looks valid

  • This email appears to be from President Weinman
  • Sometimes these emails include an exact replica of the individual's email signature
  • The email is personally addressed to Marist College payroll personnel

Why this is fraud

  • The originating email address is not a Marist College address
  • Direct Deposit changes can only be made through offical Human Resources forms

Additional notes

  • This is a very common scam - cyber criminals are primarily out to steal money in any way they can, and diverting paychecks is a very common tactic
  • A phone call to the alleged sender would quickly verify if this is a legitimate email - it only takes a few minutes to pick up the phone!
  • This scam has been occuring for many years, and the FBI distrubuted a warning in 2018: Cybercriminals Utilize Social Engineering Techniques To Obtain Employee Credentials To Conduct Payroll Diversion
  • Tip: login to your bank every pay day to ensure your own direct deposit is always correct
  • Remember to always send suspicious email messages to - timely reporting helps keep the entire Marist College community safe from cyber criminals!