UCLA Information Security Office is aware of UCLA students being targeted by fake job/internship scams that impersonate UCLA staff and faculty members. Be mindful of phishing emails that may be disguised as a job opportunity.

These messages often include the name of a real UCLA professor or administrator and may even copy their email signature to appear more convincing.

The messages include a PDF attachment that the scammer claims is your “paycheck” covering office supplies and initial wages. The instructions tell you to print the PDF on white paper, cut it to the shape of a check, endorse it, and then deposit it using your mobile banking app.

Why this is phishing and fraudulent

• Spoofed sender. The “From” address is falsified to look like it comes from @ucla.edu, but the “Reply-To” field redirects responses to a Gmail account controlled by the attacker.
• Impossible banking instructions. You cannot print a check on plain paper and successfully deposit it at any legitimate bank. Checks require security paper, MICR ink for routing numbers, and clearing through official banking systems.
• Payroll will never email checks. At UCLA, all payroll payments are made by direct deposit or by a paper check sent through the mail. You will never receive a paycheck as an email attachment.
• Pretext for further fraud. These scams often combine a fake paycheck with instructions to spend some of the funds on office supplies or gift cards. The deposited check will eventually bounce, leaving the victim responsible for the full amount.
• Urgency and fake authority. The message frames this as part of a job or onboarding process, creating pressure to act quickly.

What to do

• Do not open or print the attachment.
• Do not attempt to deposit the PDF “check.” It is not valid and could expose you to additional fraud.
• Report the message to security@ucla.edu.
• If you already attempted to deposit the check or shared information, contact your bank immediately and notify the IT Security team.

Sender: UCLA Payroll <@chr.ucla.edu>

Reply-to: fuucw011@gmail[.]com

Subject: Payroll

Body:

Attached is your paycheck, which includes funds for office supplies as well as your initial weekly income. Once the deposit is processed, a Sales Representative will be assigned to assist you with the purchase of these items. Please proceed with a mobile deposit and ensure that you retain a copy of the transaction for your records. If you encounter any issues or need further assistance, feel free to reach out.

Below, I have provided a concise set of instructions on how to make a mobile deposit.

Print out and cut it to a ( check size/shape ) At the back of your check endorse by writing your

Full name

For Mobile Deposit Only at *financial institution name*

Signature.

When making a mobile deposit, ensure that you adjust the size of your paycheck to match the proportions of a check and carefully capture all the edges for the deposit.

Once you are done, you make a mobile deposit on your mobile banking app and save a copy Thank You.

--

Kevin Tang

UCLA Payroll service

Reply-to

When pressing Reply to the email, we can see that the reply to address is set to fuucw011@gmail[.]com.

Attached Check

Below is an example of the attacked check. As mentioned, you cannot print a check on plain paper and successfully deposit it at any legitimate bank. Checks require security paper, MICR ink for routing numbers, and clearing through official banking systems.

Stay safe!

When in doubt, look for these signs, and use your best judgement. Verify the offer by contacting the company directly. Look them up online. Don’t use the number or email address from the email. Look for a contact in department website, call them and ask if this is a legitimate job offer.  

If you are interested in finding a student job at UCLA, consider searching for positions on UCLA Career Center powered by Handshake (link is external), or contacting a potential supervisor directly using their official UCLA email address and not from unsolicited sources.

What to Do if You Paid a Scammer 

No matter how you paid — debit or credit card, bank or wire transfer, gift card, or cash reload card — immediately contact the company you used to send the money, report the fraud, and ask to have the transaction reversed, if possible. For specific advice and tips on how to reverse different types of payments, read What to Do If You Were Scammed (link is external).

Report Job Scams 

If you lost money to a job scam, report it to UCLA Police Department (link is external) and the FTC at ReportFraud.ftc.gov (link is external).