Consumer Alert: NYS ITS Warns Public of NY.gov Phishing Scheme

Contact Information: 
Alicia Biggs
The New York State Office of Information Technology Services (ITS) has issued a warning to the public to be aware of a phishing scheme related to NY.gov, the citizen-facing portal for NYS services.
Thursday, December 10, 2020

The New York State Office of Information Technology Services (ITS) has issued a warning to the public to be aware of a phishing scheme related to NY.gov, the citizen-facing portal for NYS services. “Phishing” is an attempt by an individual or group to solicit personal information from unsuspecting users by masquerading as a trustworthy entity.

The illegitimate email references a “Stimulus payment” and directs the user to a site that collects personal information in order to accept “a New Approved Stimulus payment of $1,200.”

Anyone who receives such an email should NOT click on any links, nor provide any personal information. ITS recommends that you delete the message right away and then clear it from your “Deleted Messages” folder.

The following images are samples of the email message and its associated webpage:

Phishing Attempt Image #1

Phishing Attempt Image #2

To help protect against this and other COVID-related phishing scams, ITS recommends the following precautions:

DO exercise caution with all communications you receive, including those that appear to be from a trusted entity. Inspect the sender’s information to confirm the message was generated from a legitimate source.

DO keep an eye out for telltale signs of phishing - poor spelling or grammar, the use of threats, the URL does not match that of the legitimate site. If the message does not feel right, chances are it is not.

DON’T click on links embedded in an unsolicited message from an unverified source.

DO be wary of how much sensitive information you provide on a website. Legitimate businesses will not solicit sensitive personal information through email or text message.

DON’T post sensitive information online. The less information you post, the less data you make available to a cybercriminal for use in developing a potential attack or scam.

For more information on phishing scams, as well as steps to mitigate a phishing attempt, visit the NYS Office of Information Technology Services Phishing Awareness resources page at https://its.ny.gov/resources

About ITS

The New York State Office of Information Technology Services (ITS) was created in 2012 to transform IT services in an effort to make New York State government work smarter for its citizens and enable the state to be accessible for businesses through the use of technology. ITS provides statewide IT strategic direction, directs IT policy and delivers centralized IT products and services that support the mission of the State. ITS operates data centers 24 hours a day, 365 days a year to support statewide mission-critical applications for over 50 Agencies, over 17 million citizen accounts, 120,000 employee accounts, 60,000 phones, 99,000 desktops and laptops, and 3,433 Virtual Desktop remote connections. ITS operates a secure network of over 1,600 miles of fiber to deliver telecommunications, Internet and Intranet services, enterprise email systems and support, IT training, networking, data storage and processing to State government entities in addition to developing new services in support of citizens, businesses and State Agencies.

For more information, visit https://its.ny.gov and follow us on Twitter @nysits.

###