Hello [Name]
This phish typically originates from a non-Cornell email address. The sender may appear as "[Spoofed Name] <[user]@ntlworld.com>" and typically impersonates a member of university leadership. The scammer's goal is typically to coerce the victim into fraudulent financial transfers via personal payment apps. Do not reply to the sender.
Could you perhaps handle a late payment for an administrative charge on the behalf of the board today?.
We have an overdue payment to a vendor to cover up for some Administrative Expense and we need a member to help out handle a Zelle or Paypal payment and will send a reimbursement check.
Amount : $970
Let me know which is best for you and when you are ready for the details.
Thank You
[Spoofed Name]