Students: Beware of Fraudulent Job Postings and Scams

While hundreds of employers regularly communicate with UBC students and alumni regarding part-time and full-time employment opportunities, cybercriminals are actively looking to exploit this interaction with fraudulent job postings and internship scams.

Many of these scams can be difficult to detect as criminals pose as employers and try to gain access to your bank account information or other personal information. With this in mind, we have compiled a list of signs to look for when reviewing potential job opportunities to identify their legitimacy.

Identifying Fraudulent Jobs or Internships

• The person communicating with you is not listed on the organization's website.
• The email address from which you receive communications does not match the organization's website.
• The person/organization requests your bank account information to deposit large sums of money into your account.
• The person/organization sends you checks or money and asks you to buy gift cards in exchange. 
• There is little or no interview process.
• There is no face-to-face (virtual or otherwise) communication.
• The hiring process is rushed or the person/organization asks you to rush your response.
• There are spelling errors in the organization’s information.
• The opportunity sounds too good to be true.

What to Do 

If you receive an unsolicited email about a job or internship opportunity, DO NOT reply and DO NOT provide any personal information. Instead, forward the email as an attachment to security@ubc.ca immediately and notify your fellow students that there is a fraudulent email circulating. If you mistakenly responded to the email, notify the UBC Information Security team immediately at security@ubc.ca.

If you come across a job or internship that seems too good to be true, please notify Student Services.

If, you suspect that you have been the victim of a cybercriminals scheme, contact your financial institution immediately. Request for your bank to notify the financial institution where the fraudulent transfer was sent. Be sure to also contact local law enforcement. And finally, change any passwords you might have revealed immediately and avoid reusing passwords from another account that you have created (See these password tips for assistance).