The UBC Cybersecurity team has received multiple reports of a phishing scam targeting faculty and staff, known as the "Press 1" scam. Attackers use spoofed phone numbers, including UBC numbers, to trick individuals into revealing sensitive information.
What is Vishing?
Vishing, or voice phishing, is a scam where fraudsters call pretending to be from trusted organizations to steal sensitive information. They create urgency, claiming issues like account breaches or unpaid bills. To stay safe, never share personal details over the phone, verify callers, and contact organizations directly if unsure.
How the Press 1 Scam Works
- You receive a phone call from a number that appears to be from a trusted institution, such as UBC or a banking institution like Scotiabank.
- A pre-recorded message states that there is an issue with your credit card and mentions two fraudulent transactions.
- The message prompts you to "Press 1" to resolve the issue.
- If you press 1, you are connected to a scammer posing as an employee of the impersonated organization.
- The scammer may attempt to extract personal or financial information from you.
Signs of the Scam
- Unexpected calls claiming an issue with your credit card or bank account.
- A pre-recorded message urging you to take immediate action.
- Caller ID showing a legitimate institution’s phone number (spoofing).
- Requests to confirm sensitive information over the phone.
What to Do If You Receive This Call
- Do not press any number: Scammers use this trick to connect you to their fraudulent call center.
- Hang up immediately.
- Do not provide any personal or financial information.
- Verify the claim: If the call claims to be from your bank, call the number on the back of your credit card or visit the institution’s official website to contact them directly.
- Report the scam: To report a phone banking scam, contact the Canadian Anti-Fraud Centre online or by calling 1-888-495-8501; this is the central agency in Canada to report all scams and fraud, even if you didn't suffer a financial loss.
Stay Vigilant
Cybercriminals are constantly refining their tactics. Always be cautious of unexpected calls requesting sensitive information and verify claims independently before taking any action.
Go Further...
- Bookmark the News and Security Bulletins section for more cybersecurity tips and updates.