Phishing scandal on campus

Last Wednesday, the University of Rhode Island’s Department of Public Safety and the FBI issued a warning concerning a phone scam that attempts to collect money from students.

The scams were said to include a phone call claiming that the student owed “unpaid taxes for school loans.” The phishing seems to have been aimed directly at international students, and the university is urging students to be aware that any phone number may be vulnerable to fraud.

“The FBI has received calls [and] complaints from college students at various universities,” said URI IT Associate Director Michael Khalfayan.

So far, there have been about 40 confirmed reports from URI students who received a call disguised as the main number for the FBI. The caller claimed to be from the IRS, and informed the students that if they failed to immediately pay their “school loan taxes,” they would be incarcerated. Some of the victims sent in money before it was known that the call was a hoax.

“Callers can deliberately falsify the phone number and/or name relayed as the caller ID information to disguise the identity of the calling party,” Khalfayan said.

The university’s police department is investigating the phishing case with the FBI Providence Bureau.

“We are in the initial phases of this investigation and all leads and physical evidence will be looked and examined to determine who is responsible,” said URI Police Major, Michael Jagoda.

“Use discretion when posting personal information on social media,” Khalfayan said. “Scammers will use this information to gain your trust… Always remember the FBI does not call private citizens requesting money and never give out unsolicited requests for personal information to callers that you do not know.”

Khalfayan suggested that students should consider how some of the information they post, when combined, could harm them. He also warned against opening attachments or clicking on links from untrusted sources, as well as sending any personal information in an email. An updated antivirus software and firewall may also help to protect students.

The university’s online directory may have students’ phone number and home address listed publicly. Khalfayan said that, “this does not mean that the security of the student’s information has been compromised.” To change what can be accessed by the public, students, faculty and staff may need to change their personal information settings through their e-Campus account.

In order to avoid future phishing cases on campus, Jagoda said he and his team will be working alongside the Informational Technologist and IT Security Department and local and federal law enforcement. Together they will look at trends and practices related to scams and fraud.

If you receive any suspicious calls, call the URI Police Department at 401-874-2121. You may also find additional resources to contact at the URI Department of Public Safety website.

 

Leave a Reply