A recent email phishing scam has been on the rise using the subject line “Final Notice: Payroll Acknowledgement Required.” This message is designed to look urgent and legitimate, but it is not coming from a trusted source.
In many cases, the email or calendar meeting invitation includes a QR code or link. If scanned or clicked, users are taken to a fake login page that closely resembles a real system. When usernames and passwords are entered, cybercriminals capture those credentials and may use them to access accounts, sensitive data, or internal systems.
Remember these tips to help protect yourself and your organization from phishing scams:
- Do not click links, scan QR codes, or open attachments from suspicious emails or unexpected meeting invitations.
- Treat unusual or alarming calendar invites the same way you would a suspicious email. Follow your organization’s reporting process right away.
- Pause before you click. Phishing messages often create a false sense of urgency—phrases like “Final Notice” are meant to pressure you into acting quickly without verifying.
When in doubt, report the message. Taking a moment to verify can prevent a security incident.