Email messages that appear to come from a “Bursar” email address at Penn State University with the subject line "New Message For You!" are being sent to random individuals at Penn State. The email indicates that a payment has been processed and that a refund is ready. The email includes a link to a fake “View Payment Detail” link.
What can you do?
If you received one of these messages (see an example shown below), simply delete the email. DO NOT click on the link, provide any information, or respond to the email. This is a phishing email that was not sent by Penn State and the link leads to a bogus site. If you did click on the link and entered your Penn State password, you should immediately go to the Penn State Password Management site at: https://www.work.psu.edu/password/change.cgi?path=3 and reset your Penn State password.
If you clicked on the email and entered any credit card or bank information, immediate contact those institutions and change any passwords they may have with those institutions.
More information on phishing attempts is available on the Office of Information Security phishing website: http://phishing.psu.edu/2018/07/19/new-message-for-you-3/