Information Security Awareness Month: Stay vigilant against targeted scams

As CWRU strengthens its digital defenses, cybercriminals are shifting their tactics to target individuals directly through unprotected channels. They’re increasingly using phone calls and text messages to bypass the university’s secure systems, often impersonating university employees or even high-level officials to gain your trust.

Here are some key tips to protect yourself and the university:

  • Stay skeptical: If a message or request seems too good to be true, urgent or suspicious, it probably is.
  • Independently verify the source: Always double-check the identity of the person contacting you. Use official university systems like the directory or contact information on the CWRU website to verify their identity—never rely on contact details provided in unsolicited calls or texts. For example, if you receive a message from someone claiming to be a university official asking for a quick favor, verify the request through official channels.
  • Follow standard processes: Even if you have confirmed the identity of the requester, always follow CWRU’s standard procedures when performing any action. Ensure that no standard verification or approval steps are skipped, even if they may seem no longer necessary at the moment.
  • Keep communications secure: Conduct all university business through approved systems and official channels. Avoid sharing sensitive information over unverified phone calls, texts or emails.
  • Watch out for impersonators: Scammers often pose as trusted figures, including university leadership or vendors, to trick you into sharing personal information or making payments. Be especially wary of requests for gift cards, money transfers, or other financial transactions—they are common scam tactics.

Remember, information security is everyone’s responsibility. By staying vigilant, you’re not just keeping CWRU safe, you’re also protecting yourself from potential scams and identity theft.