URGENT: Direct Deposit Phishing Threat – Protect Your Paycheck
The UNC Charlotte Office of OneIT Information Security has issued an urgent warning for all employees (full time, part time and students). Scammers are actively using fake emails, Google documents, text messages, and phone calls to steal your login information and take your direct deposit paychecks.
CRITICAL WARNING
You are responsible for keeping your account access safe. If you share your credentials or approve an unauthorized two-factor authentication (2FA) request like Duo and your paycheck is stolen, the university may not be able to replace or recover your pay.
How Scammers Strike
Cybercriminals pretend to be a university department like OneIT or Human Resources through texts, emails, or phone calls. Their goal is to trick you into sharing your password or approving a 2FA prompt. Once they get into your account, they change your direct deposit routing details to their own bank account.
How to Protect Yourself
- Know what we ask: OneIT will NEVER ask for your password, passcode, or 2FA approval over text, phone, or email.
- Never click links in unsolicited messages: Always log in to the payroll portal directly through the official university website that can be found at my.charlotte.edu
- Keep contact info updated in Banner: Ensure your personal phone number and personal email address are current in Banner so you get instant alerts about any changes to your payroll. Check the university FAQ for steps on updating your profile.
- Report suspicious activity: Forward any fake or suspicious messages directly to ReportSpam-group@charlotte.edu.
Change your password immediately and contact OneIT at 704-687-5500 if you entered your credentials on a fraudulent page.