The Defense Finance and Accounting Service (DFAS) is alerting users to an issue which they have been made aware of involving fraudulent SmartDocs emails. If you receive a SmartDocs email message with a clickable link, DFAS is urging people to do not click the link and just type the link into your browser.
Here is the alert from DFAS:
BEWARE! Several myPay customers have informed us that fraudulent SmartDocs email messages are being sent that could put your information and finances at risk.
The reported invalid emails contain what appears to be from a valid SmartDocs email address. The originators of these emails have “spoofed” their messages to hide their true origin and placed the SmartDocs address in the “From” line to make the email appear legitimate.
Valid SmartDocs messages from DFAS are always sent in plain text, do not include attachments and do not ask you to send any information in response. Your email program may automatically convert a valid SmartDocs message into HTML and convert some text into clickable links. We recommend that you do NOT click on any links within any email message. To access a site referenced in an email, open your browser and type the link (URL) directly into the browser.
Don’t get fooled. If you receive a SmartDocs message that contains a link, don’t click on it. If a URL is listed in the message type it in manually within your browser. Delete unexpected or unsolicited messages that contain attachments or that request you to send information back.
Becoming a victim is easy. Utilizing a few basic precautions with email handling are critical to protecting your information, finances and identity.