Phish: Fraudulent overpayment attempt

Published: March 31, 2025

This phishing attempt falsely promotes a U of T-sanctioned “student bonus” program, promising students a financial reward. The email requests personal information to claim the supposed bonus.

In this scam, the sender eventually asks for the recipient’s bank details to deposit a fraudulent cheque for the maximum award amount. They then claim an overpayment and request a partial refund via e-transfer. Since the cheque is fraudulent, the recipient ultimately loses their own money. This is a classic overpayment scam.

Email details

Subject:

Official Notification: U of T Summer Bonus Claim Eligibility

Dear Valued Student,

We are pleased to announce the Summer 2025 Student Bonus, a token of appreciation for your active engagement with the University of Toronto’s digital platforms. As a freshman, sophomore, or senior student, you are eligible to receive a one-time bonus ranging from of $400-$3,000.

To qualify, you must have been actively using your Microsoft account, ACORN, UTORid, and Quercus platforms during the academic year. Your participation and engagement have contributed significantly to our community, and we are grateful for your dedication.

To claim your Summer 2025 Student Bonus, please provide the following information:

– Full Name:
– Phone Number:
– Student ID:

Please respond to this email with the required information by 3/20/2025. Only students who received this email are eligible for the bonus, and claims will be processed on a first-come, first-served basis.

We appreciate your prompt response and look forward to rewarding your active engagement with our university community.

Eligibility Criteria:

– Must be a currently enrolled freshman, sophomore, or senior student at the University of Toronto
– Must have actively used Microsoft account, ACORN, UTORid, and Quercus platforms during the academic year
– Must provide required information (Full Name, Phone Number, and Student ID) to claim the bonus

Terms and Conditions:

– The Summer 2025 Student Bonus is a one-time payment of $400-$3,000
– Only students who received this email are eligible for the bonus
– Claims will be processed on a first-come, first-served basis
– The University of Toronto reserves the right to verify eligibility and claim information

If you have any questions or concerns, please do not hesitate to reach out to us.

Thank you for your ongoing engagement with our university community.

Best regards,

Professor Phish, MEd (he/his)
Claim Coordinator
University of Toronto

Phishing cues

Generic greeting

The email does not address the recipient by name.
Requests for sensitive information

It asks for personal details and login credentials, a common phishing tactic.
Impersonation of a trusted source

The sender falsely claims to be U of T staff and adds “Official Notification” to the subject line for credibility. These emails often originate from compromised student accounts, identifiable by the sender domain @mail.utoronto.ca. Official U of T notices are not sent from student accounts, making such emails a red flag. Contextually, one should not expect to receive official U of T notices sent through student accounts.
Sense of urgency

The message pressures recipients to act quickly by setting a deadline and claiming that “claims are processed on a first-come, first-served basis.”
Inconsistent with legitimate University practices
- Genuine U of T awards are listed in Award Explorer and automatically applied to student accounts — no personal details are required via email.
- The University does not send award cheques; funds are deposited directly into ACORN accounts.
Too good to be true

The offer of a $600 weekly for a part-time position with minimal work hours is unusually high and unrealistic, a red flag for potential scams.

Report phishing

If you receive a suspicious email, do not open attachments or click on links. Report phishing attempts to security.response@utoronto.ca.

Phish Bowl

Phish Bowl

Phish Bowl