Email Scams involving iTunes Gift Card Purchases

Cyber criminals send email scams by claiming to be someone you know (e.g. your department head, senior executive).  They usually use non-HKUST email addresses with Display Names same as the persons you know (e.g. John Chan  <johnchan.ust.hk @outlook.com>), and try to trick you into purchasing stored-value gift cards (e.g. iTunes) and sending the redemption details to them to benefit.  An example can be found here. 

Such email scams have also been reported in many local and overseas universities.  Apple also issued a webpage to warn users about similar email scams.  For more information, please seen the Learn More... section below.

How to Spot Email Scams

  1. Always check the sender email address before replying. They can easily change the Display Name in the email to pretend to be someone you know.  Details can be found here.
  2. When you reply an email, check the email address at the TO field AGAIN.   The email address shown will ALWAYS reveal the true recipient of your reply.
  3. Sophisticated Cybercriminals would use advanced technique to spoof email sender address to make you difficult to find the real sender.  Microsoft Outlook (desktop client only) provides an anti-spoofing features for detecting it.  More information can be found here.
  4. Contact the sender to verify the authenticity of the message INSTEAD OF pressing "reply button",   i.e. send an email to him/her by typing the email address again,  or verify by whatsapp or phone call. 
  5. Stay vigilant when money is involved - always be alert when you are asked to provide monetary assistance.
Learn More