Skip to main content

Cyber Academy course

Stop payment, payroll and W-2 fraud at the front desk

A 18-minute Cyber Academy course for front office & finance. Protect district money and staff paychecks with one habit: verify every bank change, payroll change and urgent payment request through a number you already trust. Learn the school-specific tricks, the call-back rule, dual approval and exactly what to do in the first 30 minutes if a payment already went out. 6 sections, 8-question knowledge check, a branching practice scenario and a completion certificate. The companion guide gives managers the outline, a huddle plan and the answer key.

Time to use
18-minute course
Audience
All staff, finance
Language
English
Formats
PDF
First page preview of Stop payment, payroll and W-2 fraud at the front desk

What's inside

  • Section: A Tuesday morning in the business office
  • Section: How these tricks work in a school district
  • Section: The call-back rule and dual approval
  • Section: Do and don't at the front desk
  • Section: If money or data already went out: the first 30 minutes
  • Section: Practice: a 10-minute office check
  • 8-question knowledge check with explanations
  • Branching scenario: The direct-deposit change before payroll cutoff
  • Completion certificate (named accounts)
  • Printable companion guide with facilitator notes and answer key

Learners will be able to

  • Recognize the red flags in vendor bank-change, payroll direct-deposit, W-2, gift card and invoice requests aimed at school offices.
  • Apply the call-back rule using contact details already on file, never the ones in the request.
  • Use dual approval so no single person can change bank details and release a payment.
  • Take the right steps in the first 30 minutes after a fraudulent payment: bank recall, leadership notice, IC3 report and evidence preservation.

More pages

How to use and print

The course runs in Cyber Academy; this companion guide prints double-sided on Letter for managers and facilitators.

Participating districts download the same files co-branded with their own name and logo, and the QR codes count scans for their campaign reports.

Supports these rubric areas

  • Awareness & Training
  • Cybersecurity Supply Chain Risk Management
  • Incident Response Reporting and Communication
  • NIST CSF PR.AT
  • NIST CSF GV.SC
  • NIST CSF RS.CO

Part of

Flash-n-Flush one-pager · All staff

Don't let your paycheck get swept away

February staff edition for all school staff. Payroll diversion is a quiet scam: a crook asks payroll to switch your direct deposit to a new account, or tricks you into signing in to a fake HR page and switches it there.

  • 90-second read
  • English
  • PDF

Flash-n-Flush one-pager · All staff

New principal? Same old gift card scam.

August staff edition for all school staff. Every August, scammers read the 'welcome our new staff' posts, then pose as the principal to new hires who don't know anyone's voice or number yet.

  • 90-second read
  • English
  • PDF

Flash-n-Flush one-pager · All staff

Didn't sign in? Don't tap Approve.

October staff edition for all school staff. Your sign-in code or approval prompt is the lock on your account.

  • 90-second read
  • English
  • PDF

Flash-n-Flush one-pager · All staff

Missed delivery? Let that text go missing.

November staff edition for all school staff. Between classroom wish-list orders and holiday shopping, almost everyone is expecting a package this month.

  • 90-second read
  • English
  • PDF

Sources