Re: GreenDot/Go Bank and Direct Deposit Scams

[Steven Alexander <steven.alexander () KCCD EDU>]

We’ve seen fraudulent requests for direct deposit changes for payroll. Our payroll department tries to reach the 
employee on their internal number if they have one; otherwise, they have to come in.

Steven Alexander
Director of IT Security
Kern Community College District
(661) 336-5111

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Hiram Wong
Sent: Tuesday, February 11, 2020 2:29 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] GreenDot/Go Bank and Direct Deposit Scams

Hi Ed,

We took our DD changes offline.  Any DD changes involve the employee coming in and physically verifying their identity. 
 MFA would probably help a lot as well!

Hiram

On Tue, Feb 11, 2020 at 2:25 PM Hudson, Edward <ehudson () calstate edu<mailto:ehudson () calstate edu>> wrote:
We have seen a spike in the use of GreenDog/Go Bank associated with student financial aid deposit and employee 
reimbursement phishing and scams.
Wondering if you all are seeing it and if so, what steps you might have taken as it pertains to this institution.  
Since there are legitimate users blocking DD changes is not really an option.
Of course, we have looked at the business processes, MFA etc. Curious as to experience on this particular aspect.
TIA
EH

Ed Hudson
CSU Chief Information Security Officer
401 Golden Shore
Long Beach, CA 90802
Tel 562-951-8431
ehudson () calstate edu<mailto:ehudson () calstate edu>

[signature_10866774]

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


--
[eSig Logo]
Hiram Wong, CISA, CISM
Internal Audit
2411 West 14th Street, Tempe AZ 85281
phone | 480-731-8827
email | @domail.maricopa.edu<mailto:@domail.maricopa.edu>
website | https://www.maricopa.edu<https://www.maricopa.edu/>
[eSig facebook]<https://www.facebook.com/maricopa.edu>[eSig twitter]<https://twitter.com/mcccd>[eSig 
linkedin]<https://www.linkedin.com/company/maricopa-community-colleges>[eSig 
youtube]<https://www.youtube.com/user/themcccdEDU>[eSig instagram]<https://instagram.com/maricopacc/>

[facebook]<http://www.facebook.com/maricopa.edu>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community