Scams

What to do when you suspect a scam?

Career services staff should follow the following protocol if they learn of a bad actor trying to contact our students either inside or outside of Handshake:

1. If the organization or contact is on Handshake, block the employer account if it is a fake organization. 

   1. • Flag the employer. Note, a flag is seen by the entire Handshake network. See Handshake’s Best Practices for Flagging article to learn more about when to flag an employer.  If the employer was previously approved, then select the check box next to, “Revoke this employer’s approval at my institution prior to Handshake validating the flag. If the flag is confirmed, this employer may be suspended.”

      • Create a detailed note for UMN staff in the View and Add Notes section. 

2. If it is not a fake organization, but a fraudulent contact associating themselves with a legitimate employer, decline and flag the account. Create a detailed note for staff. Once Handshake has removed the fake contact account, reactivate the employer account.

3. Notify all students impacted with either Phishing Email Template - found outside of Handshake or Phishing Email Template - Opportunity on Handshake. 

4. If the scam was reported by a student, suggest they follow these steps:

   1. • Notify Handshake.

      • File a police report - this is typically necessary if the bank or financial institution can work with them to reclaim lost funds, so it’s good to have the process started. Note: it’s not always possible for the student to get back lost funds if the transaction is already completed.

      • Alert their bank or credit card company to stop the charge if possible.

      • File a report with the Federal Trade Commission.

5. Add the fraudulent contact and/or organization to the Blocked/Watched Employers & Contacts - Handshake spreadsheet.

6. If you have an email address of the fraudulent contact forward the email to phishing@umn.edu. In your email, indicate that this is a phishing scam. They will black list that email address from sending emails to anyone with a UMN email domain.  

7. Send an email to the Handshake Users group notifying them of the scam opportunity and the steps you’ve taken to notify students and block the organization.

8. Consider notifying Career Counselors on your team or via CDN.

9. Reach out to CSA (handshake@umn.edu) with any questions or requests for assistance with this process.

Note: If Handshake discovers the fake employer and/or contact account, they notify CSA directly. These instructions are for your office to use if you discover the opportunity or receive notice from a student or staff member about phishing attempts.