  {"id":1264,"date":"2026-01-02T08:00:17","date_gmt":"2026-01-02T13:00:17","guid":{"rendered":"https:\/\/www.montclair.edu\/phish-files\/?p=1264"},"modified":"2025-12-23T12:41:57","modified_gmt":"2025-12-23T17:41:57","slug":"new-year-new-scams-2026","status":"publish","type":"post","link":"https:\/\/www.montclair.edu\/phish-files\/2026\/01\/02\/new-year-new-scams-2026\/","title":{"rendered":"New Year, New Scams: What We\u2019re Seeing on Campus in 2026"},"content":{"rendered":"<p data-start=\"267\" data-end=\"343\">A new year often means fresh starts, new routines\u2014and new scams.<\/p>\n<p data-start=\"345\" data-end=\"627\">Cybercriminals know that January is a prime opportunity. After winter break, inboxes fill back up, schedules get busy, and people are catching up on emails, tasks, and deadlines. Scammers take advantage of this distraction by sending messages that look urgent, familiar, or routine.<\/p>\n<p data-start=\"629\" data-end=\"697\">Here are a few scams we commonly see surge at the start of the year:<\/p>\n<h2 data-start=\"699\" data-end=\"731\">Fake HR &amp; Payroll Messages<\/h2>\n<p data-start=\"732\" data-end=\"963\">Emails claiming to be from <a href=\"https:\/\/www.montclair.edu\/human-resources\/contact-us\/\"><strong>Human Resources<\/strong><\/a> may ask you to review updated policies, confirm personal information, or access \u201cnew\u201d payroll or benefits documents. These messages often include links designed to steal login credentials.<\/p>\n<p data-start=\"732\" data-end=\"963\"><a href=\"https:\/\/www.montclair.edu\/phish-files\/2025\/12\/17\/chief-human-resources\/\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.montclair.edu\/responsive-media\/cache\/phish-files\/wp-content\/uploads\/sites\/290\/2025\/12\/Chief-Human-resource-phish.png.6.2x.generic.jpg\" alt=\"Phishing email going around posing as Human Resources.\" width=\"965\" height=\"319\" \/><\/a><\/p>\n<h2 data-start=\"965\" data-end=\"1006\">Account Alerts &amp; Expiration Notices<\/h2>\n<p data-start=\"1007\" data-end=\"1207\">Messages warning that your email, cloud storage, or Montclair account is \u201cabout to be disabled\u201d or \u201crequires immediate action\u201d are meant to create panic. The goal is to get you to click before you think.<\/p>\n<p data-start=\"1007\" data-end=\"1207\"><a href=\"https:\/\/www.montclair.edu\/phish-files\/2025\/09\/10\/action-required-now\/\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.montclair.edu\/responsive-media\/cache\/phish-files\/wp-content\/uploads\/sites\/290\/2025\/09\/Action-Required-Now.png.6.2x.generic.jpg\" alt=\"Phishing email informing user that their account will be deleted.\" width=\"969\" height=\"337\" \/><\/a><\/p>\n<h2 data-start=\"1209\" data-end=\"1245\">Giveaways &amp; Financial Requests<\/h2>\n<p data-start=\"36\" data-end=\"213\" data-is-last-node=\"\" data-is-only-node=\"\">Scammers may pose as faculty or staff offering expensive items for free. These messages often create a sense of urgency or ask for secrecy\u2014both are major red flags to watch for.<\/p>\n<p data-start=\"1246\" data-end=\"1431\"><a href=\"https:\/\/www.montclair.edu\/phish-files\/2025\/08\/26\/instruments-for-music-and-camera-giveaway\/\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.montclair.edu\/responsive-media\/cache\/phish-files\/wp-content\/uploads\/sites\/290\/2025\/09\/Instrument-giveaway.png.6.2x.generic.jpg\" alt=\"\" width=\"974\" height=\"570\" \/><\/a><\/p>\n<h2 data-start=\"1433\" data-end=\"1458\">MFA Fatigue Attacks<\/h2>\n<p data-start=\"1459\" data-end=\"1632\">Repeated <a href=\"https:\/\/www.montclair.edu\/information-technology\/security\/duo-mfa\/\">Multi-Factor Authentication (Duo MFA)<\/a> prompts you didn\u2019t request may be an attacker trying to push their way into your account. Approving one by mistake can give them access.<\/p>\n<p data-start=\"1459\" data-end=\"1632\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.montclair.edu\/phish-files\/wp-content\/uploads\/sites\/290\/2025\/12\/How-Does-MFA-Fatigue-Work.png\" alt=\"\" width=\"972\" height=\"729\" \/><\/p>\n<h2 data-start=\"1634\" data-end=\"1672\">\u201cToo Good to Be True\u201d Job Offers<\/h2>\n<p data-start=\"1673\" data-end=\"1829\">Students are often targeted with fake job postings or research opportunities that promise easy money in exchange for minimal effort\u2014or personal information.<\/p>\n<p data-start=\"1673\" data-end=\"1829\"><a href=\"https:\/\/www.montclair.edu\/phish-files\/2025\/11\/27\/job-offer-for-student-and-staff\/\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.montclair.edu\/responsive-media\/cache\/phish-files\/wp-content\/uploads\/sites\/290\/2025\/12\/joboffer11.27.png.6.2x.generic.jpg\" alt=\"The image displays a fraudulent job offer email targeting students and staff, promising flexible, part-time work with misleading payment details.\" width=\"963\" height=\"405\" \/><\/a><\/p>\n<h2 data-start=\"1831\" data-end=\"1865\">How to Start the Year Securely<\/h2>\n<p data-start=\"1866\" data-end=\"1903\">As you settle back into the semester:<\/p>\n<ul data-start=\"1904\" data-end=\"2185\">\n<li data-start=\"1904\" data-end=\"1973\">\n<p data-start=\"1906\" data-end=\"1973\">Slow down and <strong data-start=\"1920\" data-end=\"1947\">read messages carefully<\/strong>, especially urgent ones<\/p>\n<\/li>\n<li data-start=\"1974\" data-end=\"2041\">\n<p data-start=\"1976\" data-end=\"2041\">Hover over links before clicking to verify where they really go<\/p>\n<\/li>\n<li data-start=\"2042\" data-end=\"2111\">\n<p data-start=\"2044\" data-end=\"2111\">Never share passwords or approve MFA requests you didn\u2019t initiate<\/p>\n<\/li>\n<li data-start=\"2112\" data-end=\"2185\">\n<p data-start=\"2114\" data-end=\"2185\">When in doubt, <strong data-start=\"2129\" data-end=\"2159\">report suspicious messages<\/strong> via the <a href=\"https:\/\/www.montclair.edu\/information-technology\/security\/pab\/\">Phish Alert Button (PAB)<\/a><\/p>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>A new year often means fresh starts, new routines\u2014and new scams. Cybercriminals know that January is a prime opportunity. After winter break, inboxes fill back up, schedules get busy, and people are catching up on emails, tasks, and deadlines. Scammers take advantage of this distraction by sending messages that look urgent, familiar, or routine. Here [&hellip;]<\/p>\n","protected":false},"author":349,"featured_media":624,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-1264","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/1264","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/users\/349"}],"replies":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/comments?post=1264"}],"version-history":[{"count":6,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/1264\/revisions"}],"predecessor-version":[{"id":1272,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/posts\/1264\/revisions\/1272"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/media\/624"}],"wp:attachment":[{"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/media?parent=1264"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/categories?post=1264"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.montclair.edu\/phish-files\/wp-json\/wp\/v2\/tags?post=1264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}