Skip to main content

Fraudulent emails and purchase orders

Supplier advice

We want to alert you to a fraud that is targeting existing and potential suppliers of goods to many universities in the UK.

The main victims are not the universities but hundreds of organisations across the UK and Europe. In the UK alone, it is estimated that the sums run into £millions.

The scam

  1. A supplier will receive an email or phone call requesting a quotation for goods - on extended payment terms.
  2. Once the quotation has been provided, a purchase order is emailed to the supplier that is similar to an authentic university purchase order.
  3. The purchase order typically instructs delivery to an address that may or may not be affiliated with the university.
  4. After shipping the goods, they are collected and dispatched, usually abroad.

Identifying Fraudulent Emails and POs

The following will be evident in these fraudulent emails and purchase orders:

  1. An incorrect domain name (incorrect email extension) will be used to send emails and purchase orders. At first glance these fraudulent domains may appear genuine.
  2. Suppliers must always ensure that the email address is genuinely the university email address.
  3. Delivery addresses will typically be a self-storage facility or freight forwarders, often nowhere near the university.
  4. In some cases, the delivery address may be a genuine university address, which is later changed or redirected.
  • Never contact the name/number used on the email/purchase order.
  • Always contact through the main university switchboard.
  • For high value orders, please refer to the universities guidance on public procurement.
  • We advise all suppliers to consult with their IT or cyber security advisors to ensure they remain vigilant and informed on how to identify suspicious requests.

If you are ever unsure about a quotation request sent by email and purporting to come from Birkbeck, University of London, or the subsequent purchase order, please contact the Procurement Team on +44 (0)20 3926 3184 or (0)20 3926 3223 or a known College contact. Please do not attempt to call any telephone numbers contained within the suspicious emails.