Author: Katie Feno

Recently, we’ve seen an uptick in email scams telling community members that they have overdue or unpaid invoices. In many cases, the senders of these emails impersonate real companies and people that you know and trust, including members of your department or senior staff. This is a tactic that scammers use to get you to trust the information in the email. The email phishers hope that by both using familiar names and creating a sense of urgency – like using words like “Urgent!” or “Act now!” or threatening to turn off key services – that people will act without doing any further investigation and questioning.

If you receive any emails about unpaid invoices, particularly if it’s not something you were expecting, it’s good to do a little extra research:

• If the email mentions someone from the Bryn Mawr community, reach out to that person directly and ask about the email.
• Contact any vendors mentioned via trusted means, like the customer service number on their official website.
• Do not follow any links or call any phone numbers that are listed in these unexpected emails.

If you believe you may have received one of these emails and provided any information or payment to the phisher, please get in touch with the Help Desk as soon as possible. The Help Desk is also happy to talk with you about any questions you may have about suspicious emails. We can be found on the

Starting on May 1^st, 2026, community members will no longer be able to see any paychecks or tax forms in Bionic. Instead, these will be available in Workday and a new pay history portal.

To see paychecks and tax documents from 2025 and earlier, go to payhistory.brynmawr.edu and login with your College username and password. Please note that you will need to be logged in to the College VPN in order to access this website. Instructions for downloading and using the VPN can be found here: https://askathena.brynmawr.edu/help/college-vpn

All paychecks from 2026 can be found in Workday. Please check our How-To Guides for information on viewing and printing pay slips in Workday: https://www.brynmawr.edu/inside/offices-services/information-technology/workday/how-guides-videos

If you have any questions about this change or have any questions about using the VPN, please reach out to the Help Desk: help@brynmawr.edu, 610-526-7440.

Starting on May 1^st, 2026, community members will no longer be able to see any paychecks or tax forms in Bionic. Instead, these will be available in Workday and a new pay history portal.

To see paychecks and tax documents from 2025 and earlier, go to payhistory.brynmawr.edu and login with your College username and password. Please note that you will need to be logged in to the College VPN in order to access this website. Instructions for downloading and using the VPN can be found here: https://askathena.brynmawr.edu/help/college-vpn

All paychecks from 2026 can be found in Workday. Please check our How-To Guides for information on viewing and printing pay slips in Workday: https://www.brynmawr.edu/inside/offices-services/information-technology/workday/how-guides-videos

If you have any questions about this change or have any questions about using the VPN, please reach out to the Help Desk: help@brynmawr.edu, 610-526-7440.

Please be aware of phishing messages that are currently showing up in people’s email inboxes. Recently, phishers have been using information they gather during phishing attacks to log in to Workday and change the direct deposit information of Community members. We are working with the Controller’s Office to implement some safeguards to help mitigate this sort of attack.

To edit payment election details, employees will now be required to enter their current bank account number(s). Employees will be given 3 attempts before the ability to update payment elections will become locked. Help text has been added to the Payment Election screens to remind employees to have their full bank account information readily available, as well as the steps to take when the number of attempts to edit information has been exceeded.

Many of these scam emails use familiar branding – like the Bryn Mawr or Microsoft logos – and recognizable names to create a false sense of security. Phishers will often couple this security with scare tactics in the hope that this will encourage you to act quickly and without thinking about it too much. They’ll say things like a student is in urgent need of assistance, that your account is about to expire unless you act immediately, or that a confidential work report is being shared with you. Often, you will be asked to click on a link and/or fill out a form that asks for private information, including usernames, passwords, or bank details. LITS and Bryn Mawr College will never ask you to fill out a form like that and any email that asks for this type of information is a scam.  

Do not respond to the email, click on any links, or fill out any forms, especially with your username and password. Do NOT share your passwords or DUO codes with ANYONE. LITS will never ask you to verify a DUO prompt or send you a passcode or password. Do not approve of any Duo pushes or prompts that you did not initiate yourself.

If you believe you’ve given your password or personal information to a phisher, please change your password immediately and get in touch with the Help Desk.

Email scams come in many forms. While we work to keep you informed, attacks are increasingly diverse and sophisticated. It’s not possible for us to warn you of every message before you see it. Be cautious and suspicious. If you ever have a question or suspicion, don’t hesitate to contact the Help Desk: help@brynmawr.edu or 610-526-7440.

Another day and another phishing attempt is making the rounds. This particular message asks for community member’s quick attention to make a an update to their multi-factor authentication. It includes a QR code and asks folks to scan it to complete the verification process. This message is a SCAM.

Like many other scam messages, this email uses familiar branding to create a false sense of security. The calls for quick action to preserve account access are also a common tactic used by scammers.

Even if when messages appear to be coming from a Bryn Mawr email or use Bryn Mawr branding, they are a scam. LITS will never ask you to fill out a form to verify your account or update multi-factor authentication. Do not respond to the email, click on any links, or fill out any forms. Do NOT share your passwords or DUO codes with ANYONE. LITS will never ask you to verify a DUO prompt or send you a passcode or password.

If you ever get an email and have questions about what it’s asking you to do, please reach out to the Help Desk (help@brynmawr.edu or 610-526-7440). Please feel free to delete any phishing messages you have received.

If you believe you’ve given your password or personal information to a phisher, please change your password immediately and get in touch with the Help Desk.

Email scams come in many forms. While we work to keep you informed, attacks are increasingly diverse and sophisticated. It’s not possible for us to warn you of every message before you see it. Be cautious and suspicious. If you ever have a question or suspicion, don’t hesitate to contact the Help Desk: help@brynmawr.edu or 610-526-7440