Loyola Information Security Blog

Introduction

You’ve probably come across a suspicious email in your Outlook inbox before—maybe you forwarded it to ITS for verification, or perhaps you spotted the red flags yourself. While email scams are widely recognized, threats through other channels like Phone calls, Voicemails, WhatsApp, SMS, and social media, can be just as deceptive and widespread. As a Loyola Student, Faculty, Staff, or NAP your affiliation makes you a potential target for cybercriminals using these platforms. That’s why recognizing these scams is just as crucial for protecting your personal and work information—especially since UISO cannot directly prevent attacks that occur outside of Loyola-managed services.

Phone Call and Voicemail Scams (aka Vishing)

Vishing (Voice Message Phishing) scams have become increasingly sophisticated, often targeting university students, faculty, and staff by posing as trusted organizations. These scams use social engineering—manipulating people into revealing sensitive information—to deceive victims. Since phone calls and voicemails feel more personal and urgent than emails, scammers rely on high-pressure tactics to get you to act before you think critically.

Common Characteristics of Vishing Scams

1. Impersonation of Loyola Offices or Local Authorities – Scammers may claim to be from Loyola’s Financial Aid Office, Campus Security, or even a government agency like the IRS or USCIS. They might say you owe outstanding tuition, have an issue with your student visa, or need to verify personal details for a university service.
2. Fake Job or Internship Recruiters – Calls promising high-paying, flexible job opportunities (especially from companies you never applied to) are often scams. These may request your personal details, banking information, or upfront payment for training materials.
3. “Tech Support” Scams – Some attackers impersonate IT support, claiming there is an issue with your Loyola email, UVID, or account security. They may request your credentials or ask you to install remote-access software. Loyola ITS will never ask for your password over the phone.
4. Threats and Urgency – Scammers pressure you to act immediately, using threats of academic penalties, arrest, deportation, or revoked student privileges. Calls claiming you’ll be expelled, have your scholarship revoked, or be taken to court should be major red flags.
5. Requests for Unusual Payments – No legitimate institution will ask for tuition, fees, or fines to be paid via gift cards, cryptocurrency, or wire transfers.

SMS, WhatsApp, and Text Messaging Scams (aka Smishing)

These types of scams—often referred to as smishing (SMS phishing)—use the same psychological manipulation and social engineering techniques as vishing and email phishing, but they can be even more deceptive because they land directly in your personal message inbox, bypassing traditional email security filters.

Common Characteristics of WhatsApp and SMS Scams

1. Impersonation of Loyola or Student Organizations – Scammers may pose as Loyola departments, student groups, or even individual students, claiming to offer exclusive opportunities, event registrations, or campus-related services.
2. Fake Concert, Event, or Sports Tickets – With Chicago being a major hub for events, scammers take advantage of students looking for resale tickets to concerts, sports games, or school events. They’ll request payment through non-refundable methods like Venmo, Zelle, or cryptocurrency, only to disappear once the money is sent.
3. Bogus Job or Internship Offers – Targeted primarily at students, these scams promise easy money or high-paying part-time jobs with flexible hours. They may request personal information, such as banking details or SSNs, under the guise of setting up direct deposits.
4. Urgency and Fear Tactics – Just like vishing scams, these messages try to push you into acting quickly before you can assess their legitimacy. They may claim your tuition is overdue, your campus parking permit is expiring, your faculty, staff, or student account is at risk, or other threats relating to academic penalties, arrest, deportation, or revoked student privileges
5. Malicious Links and Attachments – Many smishing scams include a shortened or misleading link that, when clicked, leads to a fake Loyola login page designed to steal your credentials or install malware on your device.
6. Requests for Sensitive Information – No legitimate Loyola department, financial aid office, or employer will ask for personal details, passwords, or financial information over text or WhatsApp.

Social Media Scams

Social media has become a prime hunting ground for scammers, who use platforms like Instagram, Twitter (X), LinkedIn, Facebook, and even TikTok to impersonate trusted entities, manipulate users, and steal sensitive information. Loyola students, faculty, and staff are not immune—scammers often exploit university affiliations to make their schemes appear more credible. Whether through fake giveaways, fraudulent job offers, or impersonation of university accounts, these scams can lead to financial loss, identity theft, or compromised accounts.

Common Characteristics of Social Media Scams

1. Fake Loyola or Student Organization Accounts – Scammers create accounts that mimic Loyola departments, student organizations, or faculty members to promote fake events, scholarships, or fundraisers. They may ask you to submit personal information or send payments via third-party services.
2. Phony Giveaways and Contests – Posts promising free Loyola merchandise, event tickets, or scholarships often require you to click a suspicious link, fill out a form with personal details, or “verify” your identity—leading to credential theft.
3. Job and Internship Scams – Fraudulent recruiters may reach out via LinkedIn or Instagram DMs, offering lucrative job opportunities that require upfront fees, sensitive information, or deposits for “training materials.” If a job seems too good to be true, verify it through official channels like Handshake or the Loyola Career Services Center.
4. Hacked or Impersonated Friend Accounts – Scammers may hijack a real student’s or professor’s account, sending DMs asking for money, donations, or urgent help. If a message from a friend seems off, contact them through another method to verify.
5. Investment and “Get Rich Quick” Schemes – Some scammers claim to have “insider knowledge” on cryptocurrency, stock trading, or financial investments, promising huge returns if you send them money first. Legitimate investment opportunities will never guarantee instant profits.
6. Romance and Catfishing Scams – Scammers may use fake profiles to develop online relationships with victims before asking for money or personal details. If someone you’ve never met asks for financial help, it’s a red flag.

What to Do If You Receive a Scam

1. Do Not Engage

• Do not reply, click links, or call back unknown numbers.
• If the message threatens consequences (e.g., legal action, account suspension), resist the urge to respond out of fear.

2. Verify Independently

• If the message claims to be from Loyola, a bank, or another institution, contact them through official channels (e.g., their website, university email, or verified phone number).
• If a social media account claims to represent Loyola or a student organization, check if it’s linked from an official source.

3. Report the Scam

Depending on the platform, take action:

• Phone Call or Voicemail: Block the number. If financial fraud is involved, report it to the Federal Trade Commission (FTC) at reportfraud.ftc.gov.
• SMS or WhatsApp: Report accounts within the app.
• Email: If received through Loyola email, forward it to UISO for review.
• Social Media: Report the account directly to the platform and notify UISO if Loyola-affiliated accounts are impersonated.

4. Strengthen Your Security

• Enable Two-Factor Authentication (2FA) on all major accounts, including Loyola’s UVID, banking apps, and social media.
• Use strong, unique passwords for different accounts and avoid reusing Loyola credentials elsewhere.
• Monitor your accounts for unauthorized activity. If you shared sensitive information, change your passwords and check your financial statements.

Conclusion

Scams aren’t limited to your inbox—cybercriminals are increasingly targeting users through phone calls, WhatsApp, SMS, and social media. By staying informed on common tactics and red flags, you can better protect your personal and work information from these evolving threats. If you ever receive a suspicious message or call, trust your instincts, verify the source, and report it when necessary. Staying vigilant is your best defense against falling victim to these scams.