DEPOSIT ACCOUNT CHANGE
This phish typically originates from a non-Cornell email address. The sender may appear as "[Spoofed Name] <[user]@gmail.com>" and impersonates an employee. Do not reply to the sender. The scammer's goal is to coerce an HR employee to make fraudulent direct deposit change.
Hello,
I kindly request your assistance in updating my paycheck information, please guide me through the process or provide me with the appropriate forms or documents that need to be completed.
Thanks