Skip to main content

Cornell University

[Blank Subject]

This phish typically originates from a non-Cornell account. The sender may appear as "[Spoofed Name] <[user]@gmail.com>" and impersonates a member of university leadership. The body text may vary. Do not reply to the sender. The scammer's goal is typically to either coerce the recipient into purchasing gift cards or make a fraudulent direct deposit change.

First Example

Email me your cell number when you get this.


Best Regards,
[Spoofed Name]
Director


Sent from my mobile device

Second Example

Let me have your privatecell# I need you to handle something important.


Best Regards,
Prof. [Spoofed Name]
Associate Dean


Sent from my mobile device

Third Example

Hi,


Please drop me your personal # I can reach you at.


Kindest Regards,
[Spoofed Name]
Executive Director
Cornell Cooperative Extension of Jefferson County

Fourth Example

Let me have your privatecell# I need you to handle something important.


Best Regards,
[Spoofed Name]
Vice President
Chief Risk Officer


Sent from my mobile device

Fifth Example

Good Morning,

I hope you are doing well? I wish to request your help in updating my payroll direct deposit information, I have an emergency issues with the previous account on file. Your response and help will be highly appreciated.

Kind Regards,
[Spoofed Name]
Senior Viticulture Extension Associate

At Cornell we value your privacy. To view
our university's privacy practices, including
information use and third parties, visit University Privacy.