It’s impossible to be too security conscious. Employers that outsource their payrolls to third-party payroll providers have reported receiving phony emails referring to “Password Change Notification” or “First Notice—Digital Certificate Expiration.” It’s a scam.
The emails indicate that recipients’ online passwords have expired, detail instructions to set up new passwords and direct recipients to click on a link. Likewise, digital certificates are used to access service providers’ Internet services. Email recipients are directed to click on a link.
Should you receive a similar email, don’t click on any links or open any attachments. Contact your service rep immediately to get the email address of your provider’s security offices, then delete the malicious email.
Suggestion: Get to know what your provider’s website and emails look like. That way, you should be able to distinguish phony email from legitimate email.