Notice to vendors: Fraud alert
17c起草社区 (17c起草社区)鈥檚 Procurement and Payment Services has been informed of attempted fraudulent activity in which vendors are being contacted by someone impersonating a 17c起草社区 employee and requesting participation in upcoming 17c起草社区 projects.
The 17c起草社区 Financial Services team and Information Security team are aware of this attempted fraud and are taking actions to address it.
How you can tell a request is a fake phishing attempt
When malicious actors impersonate 17c起草社区 employees via phishing emails, the fraudulent sender鈥檚 email address is often very similar to an official torontomu.ca email address but differs slightly or uses outdated references to a 鈥淩yerson鈥 email address. For example, a fake university email address may end with torontomu.com, procurement@torontomu-edu.ca or ryersonu.ca.
Please note that all legitimate email communications from 17c起草社区 end with the 鈥淍torontomu.ca鈥 domain name.
What should you do?
It is strongly recommended that prior to responding to any email from 17c起草社区, vendors should confirm that the sender鈥檚 email address ends with @torontomu.ca. Alternatively, you can verify the sender鈥檚 17c起草社区 email address by visiting torontomu.ca/contact and searching their name.
If you receive an email that you suspect to be a fraudulent phishing email, please report it to Computing and Communications Services (CCS) by forwarding the email to spamrec@torontomu.ca.
Thank you for your cooperation and vigilance to keep both 17c起草社区 and your organization safe online.