UCLA Information Security Office is aware of UCLA students being targeted by fake job/internship scams that impersonate UCLA staff and faculty members. Be mindful of phishing emails that may be disguised as a job opportunity.

These messages often include the name of a real UCLA professor or administrator and may even copy their email signature to appear more convincing.

However, the actual sender address does not belong to UCLA. Instead, the emails are coming from external accounts such as @gmail.com, not from an official @ucla.edu address. This mismatch between the display name/signature and the true sending domain is a strong indicator of fraud.

In addition, some of these phishing emails contain a link to a Google Form disguised as an application form. The form uses UCLA logos and branding to make it look legitimate, but it is fraudulent and designed to collect personal information from students.

What to watch for

• Display names or signatures that look like UCLA staff, but the From field shows a personal address (e.g., example@gmail.com).
• Requests to continue communication on a non-UCLA email account.
• Links to Google Forms or other third-party forms that claim to be official UCLA applications but are not hosted on a ucla.edu domain.
• Unusual requests such as providing ID, Bruincard, resumes, or personal details.

What to do

• Do not click on suspicious links or provide any personal information.
• Do not respond to these messages.
• Use the Report Phish option in Outlook or forward the email to security@ucla.edu.
• If you have already replied, clicked a link, or shared information, contact the IT Security team immediately.

Always verify the true sending address and ensure that any application forms or surveys are hosted on official UCLA platforms before responding.

If you are interested in finding a student job at UCLA, consider searching for positions on UCLA Career Center powered by Handshake (link is external), or contacting a potential supervisor directly using their official UCLA email address and not from unsolicited sources.

Initial email

Sender: Shannon Riley <shanonriley999@gmail[.]com>

Subject: Research Role

Body:

Dear Student,

The UCLA Department of Computer Science is excited to offer a Remote Research Associate Position available to both undergraduate and graduate students. This is an excellent opportunity for anyone interested in gaining hands-on research experience, no prior background in computer science is required.

✅ Fully Remote
✅ Flexible Hours
✅ Weekly Compensation

If you're curious, motivated, and ready to explore the world of research, we encourage you to apply!

👉 Click here to apply < Link leads to a Google Form >

We look forward to receiving your application.

Warm regards,
Professor Stefano Soatto
Department of Computer Science
ENGINEERING VI 386A
405 Hilgard Ave
Los Angeles, CA 90095-1596
UCLA

Secondary Email

Below is an email later sent by the attacker if the fake job application has been filled out. Here the attacker requests for more personal information including resume and Bruincard ID. 

Sender: Stefano Soatto <vogtmrt112@gmail[.]com>

Subject: Research Role

Body:

Greetings, and thank you for your interest in the Research Assistant position within the Computer Science Department.

This message is to confirm that your inquiry was received. We appreciate your enthusiasm in seeking to join our team, and we are pleased to provide further information about the role and expectations.

Position Overview
Position Title: Research Assistant

Department: Computer Science

Position Type: Remote

Estimated Time Commitment: Less than 7 hours per week

Compensation: $300 per week

Work Schedule: Flexible — you may work on any day(s) of the week that best accommodate your academic schedule (typically 2–3 days per week).

This role is structured to ensure maximum flexibility, allowing you to balance academic responsibilities while contributing meaningfully to departmental research initiatives.

General Qualifications
Preferred Skills & Competencies:

Strong written and verbal communication

Proficiency in Microsoft Office (Word, Excel, PowerPoint)

Exceptional attention to detail and observational skills

Essential Interpersonal Abilities:

Active listening and critical thinking

Professional discretion and confidentiality

Ability to communicate clearly and persuasively

Supportive advising and mentoring capabilities

Experience Requirements
No prior experience is required. You will be paired with a senior student mentor who will provide guidance and support throughout the duration of your assignments and projects.

Application Required
To proceed, please submit:

A copy of your student ID card or any means of ID card

Your most recent resume

Additional Information
This is a remote position, and all necessary office materials will be provided by the department. Should a formal report be required, you will be notified in advance.

Our research efforts are designed to support the academic and professional development of undergraduate students across various departments. You will also receive peer-generated materials and guidance to ensure your success in this role.

Thank you once again for your interest. We look forward to reviewing your application.

Best regards,

Professor Stefano Soatto
Department of Computer Science
ENGINEERING VI 386A
405 Hilgard Ave
Los Angeles, CA 90095-1596
UCLA

Stay safe!

When in doubt, look for these signs, and use your best judgement. Verify the offer by contacting the company directly. Look them up online. Don’t use the number or email address from the email. Look for a contact in department website, call them and ask if this is a legitimate job offer.  

If you are interested in finding a student job at UCLA, consider searching for positions on UCLA Career Center powered by Handshake (link is external), or contacting a potential supervisor directly using their official UCLA email address and not from unsolicited sources.

What to Do if You Paid a Scammer 

No matter how you paid — debit or credit card, bank or wire transfer, gift card, or cash reload card — immediately contact the company you used to send the money, report the fraud, and ask to have the transaction reversed, if possible. For specific advice and tips on how to reverse different types of payments, read What to Do If You Were Scammed (link is external).

Report Job Scams 

If you lost money to a job scam, report it to UCLA Police Department (link is external) and the FTC at ReportFraud.ftc.gov (link is external).