The UC Riverside Information Security Office and Financial Aid Office have received reports of fraudulent emails and text messages targeting UCR students. These scam messages usually claim that your financial aid is delayed or that your account requires urgent verification. They often include links directing you to fake login pages designed to steal your personal information, login credentials, authentication codes, or financial details.
Steps to Protect Yourself and Your Aid
- Never share your password or Duo multi-factor authentication (MFA) codes. The university will never ask for your NetID password, MFA code, or banking details through unsolicited links, text messages, or phone calls.
- Never approve a Duo push unless you initiated the login attempt yourself. If you are not expecting a login verification request, it may be a bad actor attempting to access your account. Deny the request unless you initiated the login.
- Use the Duo Biometric authentication method. Add another layer of protection to your UCR account by enrolling in the Duo biometric authentication. This authentication method allows you to log in securely using fingerprint readers or facial recognition on compatible devices.
- If being asked to take action, verify directly with the official source. Always check your official financial aid status by navigating directly to R’Web at rweb.ucr.edu. If you have questions or concerns about a message you received regarding your financial aid, contact Student Business Services directly:
-- Email the office at sbsofc@ucr.edu
-- Call the office at (951) 827-3204
-- Visit the office in the Student Services Building, room 1111
- Notify the UCR Information Security Office. If you receive a suspicious email in your inbox, do not click any links or download attachments. Report it immediately using the Report Suspicious button (the hook-and-envelope icon) in your UCR Gmail account (watch this video to learn how).
You can also report suspicious activity by emailing abuse@ucr.edu. If you suspect your account credentials have been compromised, change your password immediately and contact ITS BearHelp at (951) 827-4848 or its.ucr.edu/help.
As we begin a new academic year, remember that you have the power to keep your information safe. By staying vigilant, trusting your instincts, and taking advantage of the many campus resources available to support you, you can protect yourself and our Highlander community.
Dewight Kramer
Chief Information Security Officer
Information Technology Solutions
Asirra Suguitan
Associate Vice Chancellor and Campus Controller
Business & Financial Services