Scam Targets Student Refund Accounts

Please be aware of a recent scam targeting student refund accounts.

 

What is happening?

Scammers are emailing students, claiming that they must update their contact information with BankMobile. They threaten that failure to do so will result in the student’s account being deleted and an inability to receive any refunds from JMU.

 

How does the scam work?

  • Students receive an email with an attachment containing a link to a web form asking for personal info, account info, and security questions like those on the BankMobile/BMTX site.
  • After submitting the form, the student receives a text from someone pretending to be from BankMobile’s IT support team. The scammer instructs the student to reply with a code that is sent via a legitimate BankMobile email.
  • The scammer uses the code to gain access to the student's BankMobile account, locks the student out, and steals any refund money.

 

What should you do?

  • If you receive an email asking for personal information or to fill out a form, do not respond or click on any links.
  • Always verify the sender's address and contact the University Business Office or JMU IT Help Desk if you are unsure.
  • If you suspect you have received a fraudulent email or text, report it immediately. Forward the message as an attachment to abuse@jmu.edu or contact the JMU IT Help Desk.

 

Protect your information!

  • Never share your personal information, passwords, security answers via email or text.
  • Never share a multi-factor authentication code (Duo or BankMobile) with another person for any reason.

 

If you would like additional information on phishing scams, please see the IT phishing education website. If you have questions or need assistance, please contact the IT Help Desk at 540-568-3555 or helpdesk@jmu.edu