Warning to students over scam grant email

SCAMMERS have been sending Cardiff University students emails which say they have been awarded a grant – before prompting them to enter personal details.

According to Action Fraud – the national fraud reporting centre – students started receiving emails as early as September 21, claiming to be from the university finance department.

The email tells recipients they have received a grant of more than £1,750, and includes a link that recipients are asked to follow to enter their details.

The email says: “I am delighted to inform you that the University has awarded you a grant of £1,750 following the approval by the Department of Education (DoE). You are required to submit your details via the link below to have your grant processed. Submit your information for faster payment of your grant. If not there will be a delay of up to a month in processing due to the volume of work we are handling. Sincerely, Finance Department, Cardiff University”

A spokeswoman for Action Fraud said: “The email’s subject line is ‘Your student grant information’ and purports to be from the student’s university (as indicated by the signature).

“The email claims the student has been awarded a grant of £1,750 from the DoE and are prompted to follow the link provided. The URL seems to be different across emails, however, around half have been assessed as malicious/phishing on VirusTotal. According to reports the recipient is sent a request for personal and bank details.

“We have received eight Action Fraud reports concerning this during 2017 and several example emails sent to us – the earliest email received dated back to September 21.

“Individuals with email accounts at Cardiff University and University of Hertfordshire have been targeted thus far.”

A Cardiff University spokesman said: “Phishing emails are being received by staff and students of many UK universities including Cardiff.”

The university said it was taking steps to protect students. Phishing is the attempt to obtain sensitive information like usernames, passwords, and credit card details, by disguising as a trustworthy entity.

The spokeswoman said: “We are taking all appropriate steps to protect the university community from phishing emails.

“This includes blocking the emails being delivered; blocking the links within the emails; raising awareness within the university through newsletters, student intranet and social media; and working closely with the students’ union to promote awareness.

“The university would never email students or staff to ask for information such as passwords.”