The Controller’s Office received a warning from M&T Bank of a credit card scam being perpetrated against organizations.
This scam involves fraudsters hacking or impersonating the email accounts of organization executives, managers or vendors. They then send what appears to be a legitimate email to an employee/cardholder within the organization, requesting that the cardholder purchase large quantities of gift cards (such as iTunes gift cards). Once the gift cards are purchased, the fraudster will request that the cardholder send them the numbers and PIN’s associated with the gift cards. Often these emails will include instructions that the cardholder should talk to no one about the request, not even the requester. After the gift card information is delivered to the fraudster, the organization learns that the transactions and the request were fraudulent.
Please be reminded that under University Policy, campus One Cards are not to be used to purchase gift cards. Additionally, should you receive any suspicious request to make out of the ordinary purchases on your One Card, you should immediately contact the person making the request directly for verification.
As always, if you are unsure about a purchase being within University policy, please contact the Controller’s Office first.