Phishing and Financial Fraud Awareness
Michigan Tech IT has received reports that outside parties are posing as IT Support and asking employees and students to provide a Duo multifactor authentication (MFA) code.
Michigan Tech IT will not call you and ask for these codes or for your password.
A fraud actor can compromise your account in less than five minutes after you accept a fraudulent MFA prompt. This can include adjusting direct deposit and adding email filters to hide messages that would otherwise warn you of the changes.
Remember, you will only receive an MFA prompt if you try to log in to a service that requires MTU Secure Sign-On (SSO). If you receive an unexpected MFA prompt by phone call, SMS message or Duo app push notification, report it as fraud through the Duo-provided option and to IT at it-help@mtu.edu. Do not accept an unexpected MFA prompt (especially if you receive several in quick succession). Change your password immediately or call IT for help at 906-487-1111.
As students return to campus, please remind them to be on the lookout for phishing emails like unsolicited remote employment/internship opportunities and “free item” offers.
Common elements of these scams include:
- Being asked to cash a check and/or to purchase equipment
- Requests to repay an overpayment or to transfer funds
- Offering a “free” item or gift card offers that involves paying a deposit to hold an item or to have it delivered
To report a phishing email in Gmail, select the three dots toward the upper right corner of the message and choose “Report phishing.” For more information, please read more about how to tell the difference between spam and phishing email.
If you have any questions or concerns about email fraud and safety, we can help. Contact IT at it-help@mtu.edu or call 906-487-1111.