Email · High volume
Fake "payroll update" emails are on the rise
Attackers are impersonating HR to trick employees into changing their direct-deposit details.
Three red flags to remember
- The sender domain looks almost right — like
twinncrest-hr.com. - It pressures you to act before a deadline ("by end of day").
- The link goes anywhere except our internal HR portal.