Fraud Alert: Be Wary of HR and Payroll Themed Email Scams
08/01/2025
We've recently seen an increase in phishing scams where fraudsters pretend to be from Human Resources and Payroll Departments, or even government offices. Their goal is to trick you into taking action.
These scam emails often contain a malicious QR code that, when scanned, leads to a fake login page. The envelope itself may also contain another fraudulent QR code or a link taking you to an external site intended to steal sensitive information, which may include financial data, personal data or login details (username and password). This tactic is known as “quishing”.
Examples of subject lines to look out for:
EFT/ACH Remittance Information
Remittance Advice
What should I do if I get one of these?
Do not scan any QR codes or click on any links.
Do not enter your username or password on a page you reached from an email or QR code.
Do not click on any email or attachment links.
Report the suspicious email immediately through our Report Abuse feature or directly through our online web portal i-Sight.