Anonymous wrote:That the scam occurred within the first HOUR of her onboarding makes me suspect this was an inside job
Anonymous wrote:
So this was not a real internship. The company is bogus.
Anonymous wrote:Anonymous wrote:I think people are misunderstanding the problem. I have received these emails through my work email several times over the years. The scammer who is outside my company and probably not even in the Us sets up an email that appears to be the name of the head of my company. Outlook will show the email as coming from Bob Smith. But when you click on the name and look at the email address, it says something random that is clearly not bob smith’s email. The first time I got one, I had a whole back and forth with the guy because I was on my iPhone and it was hard to see the actual email address. It was a weird exchange and so I didn’t buy the cards but the person was actually moderately convincing.
So I guess add this to the list of things we need to teach our teens before they go out into the world. If it seems like you are being asked t do something weird, don’t just do it. Check in with someone (even if it’s just your parent).
She can report this to the company and maybe their cyber insurance will cover her, but I don’t think this is the company’s fault. It doesn’t have anything to do with her using her own computer or downloading outlook. She was scammed by a third party. It wasn’t reasonable for her to think they were going to ask a research intern to buy 3K worth of gift cards for other employees. That was not what she was hired for. I’m really sorry she got scammed.
No. We’re not misunderstanding. We’re emphasizing the other red flags OP seems to be overlooking— namely the “use your own computer” thing and the lack of security protocols that would normally be covered in onboarding. None of what OP describes is normal or a best practice for a legitimate company.
Anonymous wrote:I think people are misunderstanding the problem. I have received these emails through my work email several times over the years. The scammer who is outside my company and probably not even in the Us sets up an email that appears to be the name of the head of my company. Outlook will show the email as coming from Bob Smith. But when you click on the name and look at the email address, it says something random that is clearly not bob smith’s email. The first time I got one, I had a whole back and forth with the guy because I was on my iPhone and it was hard to see the actual email address. It was a weird exchange and so I didn’t buy the cards but the person was actually moderately convincing.
So I guess add this to the list of things we need to teach our teens before they go out into the world. If it seems like you are being asked t do something weird, don’t just do it. Check in with someone (even if it’s just your parent).
She can report this to the company and maybe their cyber insurance will cover her, but I don’t think this is the company’s fault. It doesn’t have anything to do with her using her own computer or downloading outlook. She was scammed by a third party. It wasn’t reasonable for her to think they were going to ask a research intern to buy 3K worth of gift cards for other employees. That was not what she was hired for. I’m really sorry she got scammed.
Anonymous wrote:My kid got a summer internship as a remote researcher. At first the company said they would send her a laptop to work on. Then a few days before the start of her first day, they decided she could work off her own laptop. On her first day, she was instructed to download outlook and another cloud software where she was supposed to enter her work. One of the first outlook emails was from someone with the CEO's name but not the CEO's company address. This person asked for her phone number and from there proceeded to cajole my kid into buying 3K worth of Amazon gift cards because it was supposed to be a present for the employees. By the time I found out about it, it was too late, the gift codes had been redeemed. She used her debit card to buy this.
No matter how many times I have warned my kids about scams out there AND even told them about this sort of scam where the email is not originating from the actual person but someone impersonating that person, my warnings never sunk in.
So a couple of things are bothering me.
1) the company not giving her the equipment to work on but having her use her own
2) Downloading Outlook. 365 emails can be accessed thru their website, just like gmail. One doesn't need to download Outlook.
3) No security protocols as part of onboarding. In my experience, the IT department talks regularly about this sort of stuff to all employees and DEFINITELY as part of onbaording. Company ransomware happens.
4) No security filters in the company emails.
On the one hand, I am really angry at my kid and worried about my child's poor judgment. The latter is a huge source of concern. I can only hope this is a huge wake up call to a kid who has been so used to adults telling her what to do all her life. She is a good student, diligent and hardworking and that is its own problem. She doesn't question authority. She does as she is told. And she was easily scammed.
Anonymous wrote:I would be upset, too, but even adults get scammed.