**PAYCHECK**
This phish typically originates from non-Cornell email infrastructure and spoofs (or fakes) a Cornell University email address. The sender may appear as "Payroll Services <payroll@cornell.edu>". This email is typically received after a victim has already replied to a student employment scam. The email contains a fake check in the form of a PDF attachment. Do not attempt to deposit the checks and cease all contact with the sender. See Beware of Job and Internship Scams from Career Services for more information.
Hello [Name], Attached is the paycheck to cover the expenses for the office supplies and your first weekly pay. However, these supplies are assigned to you by the department to carry out your assignment duties. Kindly proceed to make a mobile deposit.
The steps for making a mobile deposit of your check are listed . Print it out and cut it out to the appropriate size and shape. On the check's back write
Full name
Mobile Deposit Only
Your account number
Sign.
Thank you.
[Spoofed Name]
Payroll and Student Employment Assistant
[College] - Student Employment & Payroll