SCAM ALERT: Grateful for the Recognition Through Bonus
DATE: 09/03/2024
EMAIL SUBJECT: Grateful for the Recognition Through Bonus (Additional subject lines were used in different versions of this email. Please see the full list below.)
COMMUNICATION CHANNEL: Email
SENDER: The New School Payroll Services <estest@moon.gmobb.jp>
Note: Additional versions of this scam were sent from The New School Compensation Team <estest@moon.gmobb.jp> and The New School HR Department <no-reply@auction4.gmobb.jp>
Additional Email Subject Lines Used
- Thanks for the Exceptional Bonus Acknowledgment
- Important Update: Payroll Processing Changes
- Policy Update: Overtime and Holiday Pay
- Action Needed: Verify Your Direct Deposit Information:Action Required
- Reminder: Deadline for Benefits Enrollment
- Instructions for Updating Personal Information
- Appreciating Your Commitment and Bonus Award
- Completed: Complete with DocuSign: NC Funding Agreement
- Sincere Thanks for the Year-End Bonu
Phishing Message Image
Message Text, Attachment & Red Flags
Message Text
You Have Received a Fax
Inbound Fax Details
Sent to: careerservices@newschool.edu
Number of Pages 2
Sender CSID Fax Services
Sender Caller ID 266863569
Message Attachment Text
Subject: Appreciation Bonus for Careerservices
Dear Careerservices,
This notice advises that in recognition of your hard work, dedication, and outstanding contributions to the team, we are delighted to inform you that you will receive a bonus with your next paycheck.
Please scan the barcode and sign where necessary.
[Barcode]
Your commitment to excellence and exceptional performance has not gone unnoticed, and we want to express our gratitude by acknowledging your valuable contributions.
Regards,
The New School HR/Payroll Manager
****The New School HR Department 2024****
🚩 The email claims to be from a department at The New School but the sender email address is not a valid or official TNS email address. Always pay attention to the sender email address!
🚩 The message was sent out claiming to be a fax—all official messages from offices and departments at The New School are sent out by email using official @newschool.edu email addresses.
🚩 The email includes a QR code to collect information regarding the so-called bonus. The university's HR department would reach out to you directly if they need any information or would direct you to submit sensitive information via Secure Send.
🚩 Though the email claims to be from Human Resources, it does not use the university's official signature formatting.
If you received this email, do not engage with the email— do not reply, forward, download attachments, or click on links. Please delete the email from your inbox.
Return to Phish Bowl