Be Alert for Payroll Tax Email Scams

Syracuse University’s Information Security team has again been notified that employees at several other colleges and universities have been targeted by malicious email campaigns attempting to steal usernames and passwords, or to install malicious software—malware—on users’ computers. These phishing emails masquerade as legitimate messages from human resources and payroll offices and carry instructions for obtaining W-2 forms. Email recipients are asked to click a hyperlink in the message to log in and view their W-2 form.

These scams are common and widespread during tax season. Consequently, when the SU Payroll Service Center sends its annual W-2 notification, it WILL NOT include any clickable links (or hyperlinks) in the message. Instead, you will be asked to log into MySlice directly via your browser. Similarly, no one at the University will send you an email asking that you reply with personal information, such as your SU NetID and password.

If you receive a message containing a hyperlink to MySlice or your W-2, do not click the link. It is not from the University. Delete the message immediately. Do the same for any email that asks for your log-on credentials.

If you happen to receive a message like these, and you click the link and enter your SU credentials (NetID and password), you should consider them compromised, and should change your SU password immediately. You can change your password by opening a browser and entering NetID.syr.edu. When the page opens, click “Change Your Password” and follow the instructions.

Note that email addresses may become functional links in some email programs. The message from the Payroll Service Center will contain their email address. You can verify the URL of any link before you click it by hovering your cursor over the link and examining the URL. If you don’t recognize the URL, don’t click it.

If you have any questions or need assistance with verifying any email messages, please do not hesitate to contact your local IT support team (if you’re SU faculty or staff) or the ITS Service Center (if you’re a student) at 315.443.2677 or help@syr.edu.