Fraudulent emails and purchase orders

This message is for the attention of existing and potential suppliers to the University of Reading.

We want to alert you to a fraud scam that is targeting existing and potential suppliers of equipment to the University of Reading, as well as other Universities and businesses, nationally and globally. Please take the necessary precautions so that you are not a victim of this scam.

The scam operates in the following way: A supplier will receive an email requesting a quotation for specific item/s of equipment, often in large quantities and of high value. Once the quotation has been provided, a purchase order is emailed to the supplier that bears resemblance to an authentic University purchase order. The purchase order typically instructs delivery to an address not affiliated with the University. After shipping the item/s of equipment, the supplier never receives payment and is unable to retrieve the shipped products.

How to identify the Fraudulent emails/POs:

  • Incorrect domain name used to send emails and purchase orders. A valid University email address will always end in @reading.ac.uk. Hovering over the email address may reveal the originator's email address if different from that displayed. An example of an incorrect domain being used is readings-ac.co.uk
  • The delivery address is not a University address. Fraudulent addresses will typically be a domestic residence or a self-storage facility, often not anywhere near Reading.
  • Poorly written email with grammatical errors.
  • Use of a false or unknown contact from the University. If requests for quotations or purchase orders are received from a new University contact that raises your suspicion, please contact a member of the Procurement team to verify the validity of the request. Do not contact the name/number used on the email/purchase order.
  • Phone numbers not associated with the University.
  • Unusually large quantities are requested.
  • Rush to ship priority/overnight

If you are ever unsure about a quotation request sent by email, or the subsequent Purchase Order, please do contact the University of Reading Procurement Team.

Please do not attempt to call any phone numbers contained within the fraudulent emails that purport to be University numbers as they will attract a service charge.

The University has made reports to the Police via Action Fraud. If you have received any suspicious emails we would also be very grateful if you forward to procurement@reading.ac.uk so these can added to the evidence.

Further information about this type of crime can be found here:
https://www.fbi.gov/news/stories/2014/october/cyber-crime-purchase-order-scam-leaves-a-trail-of-victims/cyber-crime-purchase-order-scam-leaves-a-trail-of-victims
http://www.csoonline.com/article/2155920/social-engineering/purchase-order-scams-now-targeting-construction-suppliers.html

Things to do now

If you are unsure or suspicious about a quotation request, email procurement@reading.ac.uk

 

Page navigation

 

Search Form

A-Z lists