News

This scam is called payroll diversion or third-party payroll fraud. The scammer sends an email designed to look like it's coming from an employee to human resources, payroll, or the finance department requesting an update or change to that employee's direct deposit information. If the scam is successful, the money is diverted to the criminals bank account. In another version of the scam, the criminal will send a phishing email directly to the employee, designed to appear as if it's coming from their employer, to get that employee to divulge information that will allow the scammer to access his or her payroll information.

Employers and employees can help avoid this scam by confirming any changes to payroll information directly with the person purporting to request the change. Pay attention to the sender's email address. Often the email may have the employee's or employer's name in it, but subtle clues can help determine if it's fake.