University of Vermont

Information Technology

Phishing Scam Takes Aim at Purcard Banking Info

Email with a Subject of "New Message" purporting to come from U.S. Bank is a phishing scam — an attempt to steal your U.S. Bank credentials and Purcard information. Please do not click on the link in the message, and don't reply to it; simply delete the email.

Any email that asks you to to enter your U.S. Bank password on a non-U.S. Bank web site is a phishing scam. Do not click links in such messages and do not reply. Hover your cursor over links to see where they would take you; in this case, the included link points to "" and "" — sites in Turkey and Poland.

What to do if you've clicked on the link

If you've followed the link in the message and provided your U.S. Bank username and password (and/or Purcard account number or PIN), you should call U.S. Bank's 24-hour Customer Service center at 800-344-5696 and email the UVM Purchasing Card Program at

The "New Message" U.S. Bank Phishing Scam

The link in this message would take you to a malicious site that is not controlled by U.S. Bank, and any information you submitted would be in the scammers' possession.

U.S. Bank phishing 20130918 example

Contact UVM © 2018 The University of Vermont - Burlington, VT 05405 - (802) 656-3131