{"id":29374,"date":"2025-06-20T11:45:00","date_gmt":"2025-06-20T15:45:00","guid":{"rendered":"https:\/\/michigan.it.umich.edu\/news\/?p=29374"},"modified":"2025-06-20T11:53:02","modified_gmt":"2025-06-20T15:53:02","slug":"double-whammy-scam-aims-to-redirect-your-direct-deposit","status":"publish","type":"post","link":"https:\/\/michigan.it.umich.edu\/news\/2025\/06\/20\/double-whammy-scam-aims-to-redirect-your-direct-deposit\/","title":{"rendered":"Double Whammy Scam Aims to Redirect Your Direct Deposit"},"content":{"rendered":"<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"400\" src=\"https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-600x400.jpeg\" alt=\"Shocked african business man looking at laptop feeling scared and frustrated about an unexpected online problem\" class=\"wp-image-29376\" srcset=\"https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-600x400.jpeg 600w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-300x200.jpeg 300w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-400x266.jpeg 400w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-768x512.jpeg 768w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-1536x1024.jpeg 1536w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-2048x1365.jpeg 2048w, https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-665x443.jpeg 665w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><figcaption class=\"wp-element-caption\">Image from Adobe Stock<\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Increasingly, scammers are targeting your login credentials and your paycheck. First, they steal your login credentials using a fake U-M login screen, and then they use them to log in to Wolverine Access in order to redirect your paycheck.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Avoid the scam<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Watch for fake U-M login screens &#8211; only enter your uniqname and U-M password on the official U-M Weblogin screen <strong>(the URL must start with weblogin.umich.edu\/)<\/strong> or UM-managed Microsoft Office 365 (most often the domain of the URL will be login.microsoftonline.com or login.live.com).<\/li>\n\n\n\n<li>Beware of sponsored links in search engine results (such as Google) if you search for Wolverine Access &#8211; the link may take you to a fake login screen.<\/li>\n\n\n\n<li>Pay attention to any direct deposit notifications.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">See also <a href=\"https:\/\/safecomputing.umich.edu\/login-theft-scams\">Scams that Steal Your Login<\/a> and a <a href=\"https:\/\/safecomputing.umich.edu\/phishing-alerts\/sponsored-link-search-results-wolverine-access-may-lead-phishing-%E2%80%93-login-theft-and\">Phishing Alert about Wolverine Access and Sponsored Search Engine Results<\/a> on safecomputing.umich.edu.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Watch for scams that aim to steal your login credentials and then redirect your direct deposit.<\/p>\n","protected":false},"author":194,"featured_media":29376,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","_umich_oidc_access":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_ef_editorial_meta_date_first-draft-date":"","_ef_editorial_meta_paragraph_assignment":"","_ef_editorial_meta_checkbox_needs-photo":"","_ef_editorial_meta_number_word-count":"","footnotes":""},"categories":[27],"tags":[500,23,106],"class_list":["post-29374","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-safe-computing","tag-scams","tag-security","tag-weblogin"],"uagb_featured_image_src":{"full":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-scaled.jpeg",2560,1707,false],"thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-400x266.jpeg",400,266,true],"medium":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-300x200.jpeg",300,200,true],"medium_large":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-768x512.jpeg",665,443,true],"large":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-600x400.jpeg",600,400,true],"1536x1536":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-1536x1024.jpeg",1536,1024,true],"2048x2048":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-2048x1365.jpeg",2048,1365,true],"excerpt-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-200x140.jpeg",200,140,true],"themonic-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-60x42.jpeg",60,42,true],"ioslider-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-658x300.jpeg",658,300,true],"post-thumbnail":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-665x443.jpeg",665,443,true],"400x250-crop":["https:\/\/michigan.it.umich.edu\/news\/wp-content\/uploads\/2025\/06\/AdobeStock_318169861-400x250.jpeg",400,250,true]},"uagb_author_info":{"display_name":"Bridget Weise Knyal, ITS Privacy Office","author_link":"https:\/\/michigan.it.umich.edu\/news\/author\/bweise\/"},"uagb_comment_info":0,"uagb_excerpt":"Watch for scams that aim to steal your login credentials and then redirect your direct deposit.","_links":{"self":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts\/29374","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/users\/194"}],"replies":[{"embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/comments?post=29374"}],"version-history":[{"count":3,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts\/29374\/revisions"}],"predecessor-version":[{"id":29377,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/posts\/29374\/revisions\/29377"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/media\/29376"}],"wp:attachment":[{"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/media?parent=29374"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/categories?post=29374"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michigan.it.umich.edu\/news\/wp-json\/wp\/v2\/tags?post=29374"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}