Scam Alert: "Donation to Charity or Prize Winning"

Threat Level: Medium
Threat Type: Social Engineering
Advisory Date: 07/13/2023

Description

We have noticed recent tactics used by fraudster to steal user’s personal information. This type of scam is usually an email that appears to come from different sources claiming that you have been picked for donations by foundations and requesting users to provide their personal information through text message or a reply to an email address provided to claim a certain amount of money.

The University of Regina is warning email users to beware of this type of scam as attackers use these stolen personal information for further malicious intents.

An example email message reads as:

_______________________

Your Email ID has just won you 750.000 GBPS on the Queen
Elizabeth Foundation you are to contact cliams agent via
email: queenelizabethfound@aol.com
Claims Requriment
Names...........
Age...............
Country........
Phone Number........

Impact

Phishing is an online fraud technique used by criminals to entice you to disclose personal information. It is the fastest rising online crime method used for stealing personal financial information and perpetrating identity theft. Also, users may have their personal information stolen or will be requested to pay a fee or taxes to claim a 'prize'

People who respond to phishing e-mails, and input the requested financial or personal information into e-mail, text messages or websites put themselves and their institutions at risk.

Resolution

Simply ignore the request and delete the email; this type of message is completely false.

If you are uncertain about the legitimacy of an email message, forward the email message as an attachment to the IT Support Centre for verification.

Additionally if you have received a message like this, you can:

  • Review phishing guidelines.
  • If you have been engaged by potential fraudsters and have complied with their demands, please report any instances of messages to have an investigation opened.
  • Be wary of e-mail requesting for your personal information
  • Do not attempt to contact phone numbers sent in phishing emails
  • Be cautious of mimicked e-mail addresses, and incorrect 'reply-to' addresses.

Resources

These types of phishing attempts succeed because they rely almost entirely on deceiving employees, it is recommended you learn their tactics by taking information security awareness training so you can spot these attempts with ease.

You can also review our Phishing Information page to learn about the common indicators of a phishing message.

For more information, please see: https://www.consumer.ftc.gov/articles/0074-giving-charity

Questions or concerns? Contact IT Support for assistance:

    Email: IT.Support@uregina.ca
    Phone: 306-585-4685
    Toll-free in Canada: 1-844-585-4685
    In person at ED 137 or Archer Library