Notice to Suppliers -
Fraudulent Email Activity
An email scam involving request for product quotations is currently underway. These messages purport to originate from Indiana University but are, in fact, fraudulent. While the university cannot prevent this illegal activity, we are actively working with law enforcement to investigate these fraudulent email contacts.
We can share some common traits or themes of these fraudulent emails that may help reduce risk to your company in becoming a financial victim of this scam:
- The email message is poorly written with incorrect capitalization, specifically.
- Currently, the emails reference Jay Gottdenker, Director of Procurement Systems, who is not an authorized signature delegate for the University. However, it is possible that the perpetrators of this scam may use other names in the future.
- Currently, the email displays "jgottdenker@indiana.edu" as the sender, which appears to be a valid IU email address, but contains a hidden reply-to address. Clicking "reply" will reveal the real email address being used, "jgottdenker@indianaed.org" which is not associated with Indiana University.
- The message requests shipment of product to non-IU addresses.
- The message may include an attachment that is designed to look like a Purchase Order (PO), may include a logo or other graphic, and a signature that may look legitimate. If these are not a close match to POs you have received from IU in the past, or were delivered in a manner than is not expected, be suspicious.
If you have received confirmation that the email is fraudulent, you may also file a complaint directly with the IC3 (The Internet Crime Complaint Center). The IC3 is a partnership between the FBI and NW3C (National White Collar Crime Center).
Indiana University values our partnership with you and appreciate the very important role you play in providing goods and services to our faculty, students, and staff in support of their academic and research endeavors. Please know that we are assisting to the fullest extent we are able by reporting all fraudulent emails to the appropriate personnel.
