Today we received multiple reports of email messages claiming to be from Vassar personnel.  All of these messages came from gmail.com, not from vassar.edu.  The messages ask the recipient to reply quickly for an unspecified favor, or ask if someone is “available”.

If you receive one of these messages, please email it to catchoftheday@vassar.edu and then delete it.  If you engage the sender, it will lead to a fraudulent financial transaction.  The emails are from a criminal who is trying to steal money by impersonating Vassar employees and targeting people within an individual’s department or organization.  The criminal tries to convince the recipients to purchase one or more gift cards and send back the redemption codes.  This is a common scam based on existing trust relationships among employees.  Remember to always double-check the “from” and “reply-to” addresses in email to verify the sender.  It is a good practice to contact the purported sender through a known phone number, or create a new email sent to the person’s vassar.edu email address, to ask if the original request was authentic.

The reports today were for five separate instances of impersonation, targeting five different department heads.  All of the incoming email addresses were blocked as soon as they were brought to our attention, in order to prevent additional communication from the criminal.

Thank you for your attention and thank you as always for your timely reporting!  The diligence from our community members keeps all of us at Vassar College more safe and secure.