Be Aware of Phishing Emails Attempting to Steal your Funds

by

GHC IT is seeing a rise in phishing emails that appear to come from BankMobile. These messages may warn of issues with refunds, payments, or account activity and encourage immediate action. Their purpose is to trick students into sharing sensitive information, which criminals can then use to access accounts and steal your money.

Before responding to any message about your BankMobile account or refund, take a moment to verify that it is legitimate. Do not respond to suspicious emails or click on any links they contain.

1. Protect Your Account Information
BankMobile and GHC will never ask for your password, PIN, Duo code, or other account credentials.
Keep these important practices in mind:

  • Never share your GHC password, Duo passcodes, or other account credentials.
  • Never approve an unexpected Duo push notification.
  • Treat any email or text message requesting sensitive information as suspicious.

2. Know the Warning Signs
Phishing messages often use familiar names, financial concerns, and urgent language to appear legitimate.
Watch for these common warning signs:

  • Requests for your password, PIN, account credentials, or MFA information.
  • Urgent messages claiming your account will be suspended or locked.
  • Links directing you to sign in through an unfamiliar website or a Google form.
  • “External Sender” or “Unusual Sender” warning banners.
  • Sender email addresses that do not belong to BankMobile.
  • Unsolicited text messages about your BankMobile refund.

Remember: A message that looks official or mentions your refund does not necessarily mean it is legitimate. Take time to examine the sender and the request before taking action.

3. Report Suspicious Messages
If you receive a suspicious email, use the Phish Alert button in Outlook.
Reporting these messages helps GHC IT identify and block similar threats, protecting both you and the campus community.
When in doubt, report the message rather than interacting with it.

4. What If You Already Responded?
If you entered your password on a suspicious website:

  • Do not approve any uninitiated Duo requests.
  • Change your password immediately using the Forgot Password link on the GHC sign-in page or by visiting Microsoft Password Reset.

Taking action quickly can help protect your account from unauthorized access.

Final Reminder
BankMobile and GHC will never ask for your password or PIN.
Phishing messages are designed to look legitimate and encourage quick responses. Taking a moment to verify a message before clicking a link or sharing information can help protect your account.

If something seems suspicious, please use the Phish Alert button in Outlook.