[Cobo] FW: AAA Memo: Payroll Fraud

Tue Nov 27 12:09:10 CST 2018

Please be advised of additional announcements of payroll fraud for State Agencies.  Please review your procedures and make certain all step are being taken to ensure protection of the banking data  involved. Thank you.

From: Denise Northrup [mailto:admin at public.govdelivery.com]
Sent: Tuesday, November 27, 2018 12:06 PM
To: Mauck, Sheri
Subject: AAA Memo: Payroll Fraud

[Office of Management and Enterprise Services Logo]

In August 2018, OMES distributed a AAA memo to state finance officers regarding occurrences of payroll fraud. State agencies are still being targeted because the steps below have not been taken. As recently as this week, a state entity was the victim of a phishing scam aimed at fraudulently changing employee direct deposit information.

Immediate steps to take:

  *   OMES recommends all agencies immediately pull all Payroll Change/Direct Deposit forms from their public websites and move the forms to an intranet or distribute by employee request only.
  *   Additionally, until otherwise notified, personnel who handle employee payroll direct deposit procedures should verify ALL requests for changes to direct deposit by directly contacting the employee by phone and verifying information such as employee ID number, employment start date, etc.
  *   Agencies may want to set a time delay when changing direct deposit information to decrease the chance of the theft of wages.

Tips on how to protect yourself from this scam:

  *   Roll your cursor over the links received via email and look for inconsistencies. If it is not the website the email claims to be directing you to, then the link is to a fraudulent site.
  *   Never provide credentials of any sort via email. This includes after clicking on links sent via email.
  *   Be suspicious of any payroll change requests that come from a personal or outside email address. It is important to note that email addresses will often look like they come from an internal source. Instead of replying to the email, start a new email thread to the employee's internal organizational email account.
  *   Call the OMES Service Desk at 405-521-2444 or contact the appropriate IT or security support for your organization if you receive a suspicious phone call or email.

________________________________
[Facebook Large]<http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTgxMTI3Ljk4MjIxODcxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE4MTEyNy45ODIyMTg3MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3MDkyOTA0JmVtYWlsaWQ9c21hdWNrQG9zcmhlLmVkdSZ1c2VyaWQ9c21hdWNrQG9zcmhlLmVkdSZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&100&&&https://www.facebook.com/OklahomaOMES?ref=hl>

Like us on Facebook.<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTgxMTI3Ljk4MjIxODcxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE4MTEyNy45ODIyMTg3MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3MDkyOTA0JmVtYWlsaWQ9c21hdWNrQG9zcmhlLmVkdSZ1c2VyaWQ9c21hdWNrQG9zcmhlLmVkdSZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&101&&&https://www.facebook.com/OklahomaOMES?ref=hl>

[Twitter Large]<http://links.govdelivery.com/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTgxMTI3Ljk4MjIxODcxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE4MTEyNy45ODIyMTg3MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3MDkyOTA0JmVtYWlsaWQ9c21hdWNrQG9zcmhlLmVkdSZ1c2VyaWQ9c21hdWNrQG9zcmhlLmVkdSZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&102&&&https://twitter.com/OklahomaOMES>

Follow @OklahomaOMES.<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTgxMTI3Ljk4MjIxODcxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE4MTEyNy45ODIyMTg3MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3MDkyOTA0JmVtYWlsaWQ9c21hdWNrQG9zcmhlLmVkdSZ1c2VyaWQ9c21hdWNrQG9zcmhlLmVkdSZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&103&&&https://twitter.com/OklahomaOMES>

Having trouble viewing this email? View it as a Web page<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTgxMTI3Ljk4MjIxODcxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE4MTEyNy45ODIyMTg3MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3MDkyOTA0JmVtYWlsaWQ9c21hdWNrQG9zcmhlLmVkdSZ1c2VyaWQ9c21hdWNrQG9zcmhlLmVkdSZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&104&&&https://content.govdelivery.com/accounts/OKOMES/bulletins/21e66b5>.
________________________________
Update your subscriptions, modify your password or email address, or stop subscriptions at any time on your Subscriber Preferences Page<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTgxMTI3Ljk4MjIxODcxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE4MTEyNy45ODIyMTg3MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3MDkyOTA0JmVtYWlsaWQ9c21hdWNrQG9zcmhlLmVkdSZ1c2VyaWQ9c21hdWNrQG9zcmhlLmVkdSZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&105&&&https://public.govdelivery.com/accounts/OKOMES/subscriber/new?preferences=true>. You will need to use your email address to log in. If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTgxMTI3Ljk4MjIxODcxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE4MTEyNy45ODIyMTg3MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3MDkyOTA0JmVtYWlsaWQ9c21hdWNrQG9zcmhlLmVkdSZ1c2VyaWQ9c21hdWNrQG9zcmhlLmVkdSZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&106&&&https://subscriberhelp.govdelivery.com/>. If you have questions or problems related to the IT accessibility of this message, please contact the OMES accessibility compliance representative at accessibility at omes.ok.gov<mailto:accessibility at omes.ok.gov>.

This service is provided to you at no charge by the Office of Management and Enterprise Services<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTgxMTI3Ljk4MjIxODcxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE4MTEyNy45ODIyMTg3MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3MDkyOTA0JmVtYWlsaWQ9c21hdWNrQG9zcmhlLmVkdSZ1c2VyaWQ9c21hdWNrQG9zcmhlLmVkdSZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&107&&&http://omes.ok.gov>.

________________________________
This email was sent to smauck at osrhe.edu using GovDelivery Communications Cloud on behalf of: Oklahoma Office of Management and Enterprise Services *2401 N. Lincoln Blvd, Oklahoma City, OK 73105 * (405) 521-2141

[GovDelivery logo]<http://links.govdelivery.com:80/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTIwMTgxMTI3Ljk4MjIxODcxJm1lc3NhZ2VpZD1NREItUFJELUJVTC0yMDE4MTEyNy45ODIyMTg3MSZkYXRhYmFzZWlkPTEwMDEmc2VyaWFsPTE3MDkyOTA0JmVtYWlsaWQ9c21hdWNrQG9zcmhlLmVkdSZ1c2VyaWQ9c21hdWNrQG9zcmhlLmVkdSZ0YXJnZXRpZD0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&108&&&https://subscriberhelp.granicus.com/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.onenet.net/pipermail/cobo/attachments/20181127/e04a5d0e/attachment-0001.html>