Phish: Fake student support program

Published: August 21, 2025

This phishing attempt falsely promotes a U of T-sanctioned "student support program," promising students a financial reward of $1,000 and $10,000. The email requests personal information including full name, phone number, student ID and an alternative email address to claim the supposed bonus.

In this scam, the sender eventually asks for bank details under the pretense of depositing a cheque for the maximum award. They later claim there was an overpayment and request a partial refund by e-transfer. Since the cheque is fraudulent and will not clear, the victim loses the money they send back. This is a classic overpayment scam.

Email details

Subject:

Empowering Your Future: U of T's Student Support Program (Eligibility & Application)

Dear Valued Student,

We are pleased to inform you that, as a currently enrolled student at the University of Toronto, you may be eligible for the Summer 2025 Bonus. This initiative is governed by the University's policies and regulations, specifically the Student Financial Aid and Awards policy (UT Policy #123).

Eligibility Criteria
To qualify, you must:

Be a currently enrolled student at the University of Toronto
Have actively used University of Toronto digital platforms, such as Microsoft account, ACORN, UTORid, and
Quercus platforms during the academic year. Your participation and engagement have contributed significantly to our community, and we are grateful for your dedication

How to Claim Your Bonus
To claim your Summer Bonus, please use the alternative email address you provided. We recommend regularly checking and refreshing this email account to ensure timely receipt of future communications from our office.

This will help facilitate a smooth process for any further updates or notifications:

Full Name
Phone Number
Student ID
Alternative email address

Please respond to this email with the required information by September 31, 2025. Only students who received this email are eligible for the bonus, and claims will be processed on a first-come, first-served basis.

Terms and Conditions

The Summer 2025 Student Bonus is a one-time payment of $1,000-$10,000
Only students who received this email are eligible for the bonus
Claims will be processed on a first-come, first-served basis
The University of Toronto reserves the right to verify eligibility and claim information

Applying with an Alternative Email Address
You should apply using an alternative email address. Please ensure that you provide the required information (Full Name, Phone Number, and Student ID) accurately.

Follow-up on Claim Status
After submitting your claim, please follow up through the email address used for your application until your claim has been processed for payment. This will help us track your claim and address any potential issues promptly.

Payment Processing
Once your claim is processed, the payment will be issued accordingly. If you have any questions or concerns regarding the status of your claim, please don't hesitate to reach out to us through the same email thread.

We appreciate your prompt response and look forward to recognizing your engagement with our university community.

Sincerely,

Deyves Fonseca
Acting Chief Information Security Officer
Information Security
University of Toronto

Phishing cues

Generic greeting

The email does not address the recipient by name.
Requests for sensitive information

It asks for personal details, a common phishing tactic.
Impersonation of a trusted source

The sender falsely claims to be U of T senior leadership and uses the university logo. These emails often come from compromised student accounts ending in @mail.utoronto.ca. Official U of T notices are not sent from student accounts.
Sense of urgency

The message pressures recipients with a deadline and claims that "claims will be processed on a first-come, first-served basis."
Inconsistent with legitimate university practices

Genuine U of T awards are listed in Award Explorer and applied directly to student accounts. No personal details are requested by email.
Too good to be true

The offer of a $1,000 – $10,000 bonus with no clear criteria is unusually high and unrealistic.
Unusual use of alternative email

The sender insists on using a non-U of T address. Legitimate financial communications always use your official U of T account and secure portals such as ACORN and Award Explorer.

Report phishing

If you receive a suspicious email, do not open attachments or click on links. Report phishing attempts to security.response@utoronto.ca.

Phish Bowl

Phish Bowl

Phish Bowl