Scam Alert: Fraudulent Purchase Orders activity, Updated: 21 June 2024

Scam Alert: Fraudulent Purchase Orders activity, Updated: 21 June 2024

Friday, 21 June 24

What is happening:

Please be aware of a Purchase Order scam targeting companies in Ireland and Europe using fake University purchase orders / invoices. The bogus requests are being sent to companies from non University email addresses such as @outlook.com (always verify the sender and reply-to email address is from @ucd.ie) .

How the scam works:

A company receives an email requesting a quotation for specific items of equipment, often in large quantities or of high value. Once the quotation is provided, a purchase order resembling an authentic University purchase order is emailed to the supplier requesting delivery to an address where the criminal will intercept the goods. After shipping the item(s), the supplier never receives payment and is unable to get the goods back. 

How to identify a fraudulent invoice email:

• The sender is not using a valid UCD email address. A valid UCD email address will always end in @ucd.ie. Verify that the sender and reply email is a valid UCD email address. 
• The fake Purchase Order may impersonate a senior member of University staff such as the President, Head of a School, Chief Finance Officer, etc.
• The delivery address is not a valid UCD delivery address or potentially a delivery address associated with UCD where the goods will be intercepted. 
• The email may be poorly written with grammatical errors.
• There is an urgency to ship the goods.

What to do if you receive a suspicious invoice

• Do not reply to the sender using the name or phone number on the email/purchase order as this may be fake.
• Contact a member of your IT security team 
• If you are unsure about an order, verify the details by contacting UCD’s Purchasing Team

What to do if you have been a victim of fraud? 

• Report the incident to your bank. 
• Retain all information as evidence.
• Report the incident to a local Garda station \ Police office. (opens in a new window)https://www.garda.ie/en/crime/fraud/

For more information about Business fraud visit 

• (opens in a new window)https://www.fraudsmart.ie/business/