JMU staff warns of scams targeting Dukes

When it comes to avoiding scams, instincts are important. Trust yourself, and if something feels off, search for more information or call someone for details.

These are some of the many tips that JMU staff say can save Dukes from being scammed.

“Use your intuition,” said Emma Gibbons, assistant director for internships with the University Career Center. Having seen recent job and internship scams targeting JMU students, Gibbons cautions Dukes to be alert, ask questions, and do their research to make sure the recruiter contacting them actually works for the company they claim to represent and that the company is reputable. On its website, the Career Center offers resources for students to avoid falling for internship scams. “[S]cammers hope to use the system to gain personal information from students,” a statement on the website explains. “The good news is that this can be easily prevented by carefully reviewing each job posting and employer.”

Students can investigate the legitimacy of a job position and company through a list of resources that includes Glassdoor, LinkedIn, the Better Business Bureau and Handshake — JMU’s online career-services management system — before submitting their resume, applying for a job or providing personal information to someone offering them a job.

“Listen to your instincts if something doesn’t seem quite right,” the Career Center website cautions. “Ask the employer clarifying questions, and be wary if the employer withholds important information or continues to be unclear.”

Signs of a job or internship scam include a company:

• asking for your credit-card or bank-account numbers, or copies of personal documents — though you receive nothing in writing about your job offer
• asking you to send payment by wire service or courier
• offering you a large payment or reward in exchange for allowing the use of your bank account, often for depositing checks or transferring money
• sending you an unexpectedly large check
• reflecting incomplete, inconsistent, or unprofessional information on its website, email, or promotional materials — or unclear position responsibilities.

“There should be some transparency about these things,” Gibbons said. “If that’s being hidden, go in a different direction.”

Receiving a text from a job recruiter instead of a phone call or email from an official company address is also a sign of a scam. “A recruiter will reach out through legitimate means,” Gibbons said. You can also do a background check afterward, she said, “to make sure these individuals are real.”

In addition to avoiding scams, Gibbons said students can weed out unsavory jobs by taking their time in the job-search process. “I think there’s always an opportunity to listen to yourself but also what you’re looking for in those jobs and if they’re meeting expectations,” she said. Questions to ask are whether the job description falls short of expectations or the job pays less than you were hoping for. “They’re not necessarily scams, but they’re not always the most financially stable options,” she said.

Dukes can reach out to other Dukes to ask about jobs, Gibbons shared. While job hunting, students might search LinkedIn to see if any JMU alumni work at the company you’re eyeing and can verify the legitimacy of a job lead. It’s also a great way to network with other alumni, she said.

Additionally, summer housing on a college campus can be an alternative to finding a rental. Most U.S. universities offer students from other universities housing at summer rates while they’re completing internships, Gibbons said. “We have housing options in the summer for students coming to Harrisonburg who are interning locally.”

Email and technology scams

In February, JMU Information Technology sent email warnings about two scams affecting the Madison community. One was seeking access to staff members’ Duo accounts and financial information, before JMU switched to the Okta cloud-based Identity and Management System. The other was focused on stealing money from student refund accounts using BankMobile. 

“The [Duo] scam begins with an unsolicited text message from a number you don’t recognize, but the sender claims to be from JMU IT or the IT Help Desk,” a Feb. 18 email explained. “The sender may then provide your name and/or email address, asks whether they have contacted the correct person or phone number, and asks whether you have requested to shut down your email account. The sender may also be able to provide a password like one you have used before.” The goal was getting email users to provide their most recent Duo code. 

Those behind the BankMobile scam emailed students with instructions on filling out an attached web form with personal information to prevent their accounts from being deleted and ensure they didn’t lose their ability to receive funds from JMU. After submitting the form with account info and security questions, students would receive a text from someone claiming to be from BankMobile’s IT support team, instructing them to reply with a code sent by the legitimate BankMobile email. The scammer could then use that code to gain access to the student’s BankMobile account, locking out the student and stealing any refund money.

“That’s a common scam that was happening, particularly in the month of February, targeting students,” said V. Kagey, information security officer with the IT Department. Students think they need to respond immediately, he said, because the email generates “a sense of urgency.”

Often, phishing scam emails and texts have a few tipoffs that they’re not legitimate. “A lot of the scams are coming from email addresses that don’t match the business or the vendor they claim to represent,” Kagey said.

Once such scam targeting JMU staff in Fall 2023 claimed to be from the president’s office, informing them of the opportunity to receive a free musical instrument from the deceased relative of a fellow staff member.

 “The piano ‘is free,’ but the delivery service is not,” Kagey said. “You need to advance them the money, so that they can get it delivered to your home. ... They scam you out of that money.”

At first glance, the email might look OK. But it might be sent from a Gmail account instead of a university account. It also prompts recipients to contact a non-university email listed in the body of the email, and, although claiming to come from the Office of the President, it uses “Mr.” instead of “Dr.” in the return address.

Avoid email scams with some tips from the IT Department:

• If you receive an email asking for personal information or to fill out a form,do not respond or click on any links.
• Alwaysverify the sender’s address and contact the IT Help Desk if you are unsure.
• If you suspect you have received a fraudulent email or text,report it immediately. Forward the message as an attachment to abuse@jmu.edu, or contact the IT Help Desk.
• Never share your personal information, passwords, or security answers via email or text.
• Never share a multifactor authentication code (Okta or BankMobile) with another person for any reason.

For info on phishing scams, visit the IT phishing education website, or contact the IT Help Desk at 540-568-3555 or helpdesk@jmu.edu. 

Apartment scams

Those using a social media site, such as Facebook or Craigslist, to search for housing should be wary of fake listings, said Jeremy Hawkins (’04), assistant director of Off-Campus Life with the Office of Student Life.

Recently a student sent him a fake apartment ad that prompted the student to send a deposit to hold the apartment. “[They’re] thinking it’s holding an actual apartment, which it’s not,” Hawkins said. Additionally, there were clues in the photos that indicated the apartment ad was fake, like skyscrapers in the background. “That’s definitely not Harrisonburg,” he said.

Listing common apartment scams on its website, Off-Campus Life also warns again of scammers who use a real location but provide fake documentation from someone impersonating a property manager. Though it may be easier for local students to tell if an apartment listing is fake, international students are especially susceptible, Hawkins said. “They’re not physically able to be here to apartment hunt.” 

For those traveling from out of town or abroad, he encourages students to contact Off-Campus Life with any questions or concerns. “I’m happy to go on the Harrisonburg real-estate system and see if it matches up,” Hawkins said.

“Oftentimes, it’s stressful when you don’t have housing,” he said. “It’s easy to miss things in the rush to secure a place. Don’t rush through the process. Do your research; look at reviews.”

Urging Dukes to follow their intuition, he said, “It’s all about research, trusting your gut instincts. Making sure things are in writing. And then if something doesn’t feel right, there’s a good reason that it might not feel right.”

Educate yourself

To help students, staff and alumni avoid being scammed, JMU also offers classes about phishing scams and financial scams through the LinkedIn Learning platform provided through JMU Libraries.

“Anybody can be taken in,” Gibbons said. “The No. 1 thing in my experience is just hearing people say, ‘I never thought that this would happen to me.’”