The Information Security team is aware of a phishing scam targeting International Students that is being circulated among the 91亚色 community on September 22, 2025. The scam instructs students to provide sensitive information pertaining to their financial institution, passport, and tuition payment information. The scam uses the 91亚色 logo and is attempting to impersonate 91亚色 Vice-Provost Students to instill a false sense of legitimacy. This letter is NOT legitimate and was NOT sent by 91亚色.
The scam letter is shown below for reference:
If you receive the scam letter via email or any other communication medium, please do NOT respond to the scammer and report it using the or forward it to phishing@yorku.ca.
Red Flags to Watch Out For:
- Suspicious sender email:聽The sender's email address [i.e. example@mail.google.ca] is not associated with 91亚色鈥檚 official IT services.
- Urgency and fear tactics: The email pressures you to act immediately by threatening account deactivation.
- Request for personal details: 91亚色 would NEVER ask for passwords, Duo/MFA passcodes, or other sensitive information via email.
- Unsecure email address for responses:聽The email may ask you to respond to a suspicious external email address (i.e. utgsu.duo@aol.com), which is聽苍辞迟听a legitimate 91亚色 domain.
If you have already responded to this scam, stop all communication with the scammer and notify infosec@yorku.ca; If you provided any account names or passwords, change any such passwords immediately.