<div dir="ltr">Hi Tracy,<div>Sorry to hear you're going through that. Because of the rise in fraudulent emails about direct deposit, we switched a while back to requiring all employee direct deposit requests to be made in person at the central office. We used to allow email requests and hard copy forms sent interoffice, but we have done away with all of that. It's a little less "efficient" for both parties, but we think it's well worth it to remove the element of fraud from the equation.</div><div>We use the Munis employee access portal for time off requests but have opted not to turn on the direct deposit change feature.</div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Tue, Jul 29, 2025 at 12:46 PM Tracy Wilson <<a href="mailto:twilson@rsu10.org">twilson@rsu10.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div>I wanted to put this out there to warn other districts about what has been happening with our employee portal and direct deposits and to also see if it has been happening in your district.</div><div><br></div><div>A scammer is hacking into our employees district gmail accounts, going into their employee portal and changing their direct deposit. I then go in and check the routing numbers and approve it. The employee gets an email stating that their changes have been approved.</div><div><br></div><div>The problem is the scammer gets these emails and deletes them in real time. The scammer will also use the employees account to email us back. There is no way for us to know that the employee is not the one emailing us as it is truly the employees account.</div><div><br></div><div>The receiving financial institution will not give us any information about the account whatsoever (we can't even report the account as fraudulent). We have to go through the district's bank to try and get the money back. Our insurance company also believes that the district is not liable for the "stolen" money but we obviously want our employees to get their pay.</div><div><br></div><div>Our next steps are to not allow any changes in the portal anymore, and/or require a two-factor authentication to be put on their district email account. We have tried that before but some employees balked on the idea.</div><div><br></div><div>Has anyone else encountered this? If so, what steps did you take?</div></div><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr">
<ul>
<li>Tracy L. Wilson</li>
<li>R.S.U. #10</li>
<li>Payroll Specialist/Bookkeeper</li>
<li><a href="mailto:twilson@rsu10.org" target="_blank">twilson@rsu10.org</a></li>
<li>(207)369-5560 ext. 8201</li>
<li>(207)562-7059 fax</li><li><span style="font-size:12.8px"><br></span></li><li><span style="font-size:12.8px">Confidentiality Notice: This email message, including any attachments, is for the sole use of the intended recipients and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy/delete all copies of the original message.</span></li>
</ul></div></div></div></div></div>
<br>
<span><span style="font-size:15px;font-family:Cambria;vertical-align:baseline;white-space:pre-wrap">This is a staff email account managed by Western Foothills Regional School Unit 10. This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender.</span></span>_______________________________________________<br>
SchoolFinance mailing list<br>
<a href="mailto:SchoolFinance@maillist.informe.org" target="_blank">SchoolFinance@maillist.informe.org</a><br>
<a href="http://maillist.informe.org/mailman/listinfo/schoolfinance" rel="noreferrer" target="_blank">http://maillist.informe.org/mailman/listinfo/schoolfinance</a></blockquote></div><div><br clear="all"></div><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>Adam Hanson</div><div>Controller</div><div>Lewiston Public Schools</div><div>36 Oak Street</div><div>Lewiston, ME 04240</div><div>Phone: (207) 795-4100, ext. 4051</div><div>Fax: (207) 795-4177</div><div><br></div><div><span><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-size:8pt;font-family:Arial,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline">LEGAL CONFIDENTIAL: The information in this email, and any attachment, may contain legally privileged information. It is intended only for the attention and use of the named recipient. If you are not the intended recipient, you are not authorized to retain, disclose, copy or distribute the message and/or any of its attachments. If you received this email in error, please notify me and delete this message. Thank you.</span></p></span></div><div><span style="color:rgb(136,136,136);font-family:georgia,serif;font-size:12.8px"><br></span></div><div><span><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:8pt;font-family:Verdana,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline">1-855-938-0657 لترجمة هذه الوثيقة، يرجى الاتصال </span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:8pt;font-family:Verdana,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline">Haddii aad rabto in lagu turjumo warqadani, fadlan soo wac 1-855-938-0657</span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:8pt;font-family:Verdana,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline">Pour vous faire interpréter cet email, prière d'appeler le 1-855-938-0657 </span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:8pt;font-family:Verdana,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline">Para receber uma interpretação deste email, faz favor de ligar para 1-855-938-0657</span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:8pt;font-family:Verdana,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline">For interpretation in Kiswahili (Swahili), Shqip (Albanian), Farsi, Kreyòl Ayisyen (Haitian Creole), 普通话 (Mandarin), ਪੰਜਾਬੀ(Punjabi), and Русский (Russian), please call 1-855-938-0656</span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:8pt;font-family:Verdana,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline">For interpretation in Español (Spanish), Tiếng Việt (Vietnamese), and Ikinyarwanda (Kinyarwanda), please call 1-855-938-0657</span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:8pt;font-family:Verdana,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline">For interpretation of this document in other languages, please call (207) 795-4103</span></p><div><span style="font-size:8pt;font-family:Verdana,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline"><br></span></div></span></div></div></div></div></div>