How to Identify and Report Phishing Emails

Phishing is one of the most common ways attackers try to steal your information. This guide explains the tactics scammers use, the red flags to watch for, and exactly what to do when an email looks suspicious. Reporting phishing helps protect your personal data and the College.

❓ What is phishing?

Phishing is a scam where attackers impersonate legitimate organizations to steal personal information such as usernames, passwords, or financial details. These emails often look official but contain malicious links or attachments designed to compromise your account.

🚨 Common phishing tactics

• 🚨 Fake urgency: Emails claiming your account will be locked if you do not act immediately.
• 📩 Spoofed senders: Emails that appear to come from the College, banks, or well-known companies.
• 🔗 Malicious links: Links that lead to fake login pages built to steal your credentials.
• 📎 Unexpected attachments: Attachments that install malware when opened.
• 💰 Requests for personal information: Emails asking for login credentials, Social Security numbers, or banking details.

🔎 How to spot a phishing email

• ✅ Check the sender's email address. Attackers often use addresses that look similar to official ones but have extra characters or misspellings.
• ✅ Hover over links before clicking. If a link does not lead to an official College or known website, do not click it.
• ✅ Watch for grammar and spelling mistakes. Phishing emails often contain errors a legitimate sender would not make.
• ✅ Be wary of unexpected attachments. Never open attachments from unknown or unverified senders.
• ✅ Be cautious of "too good to be true" offers. Scammers send fake job offers, scholarships, or financial aid emails promising easy money. If it sounds too good to be true, it probably is.

🛡 What to do if you suspect a phishing email

1. 🔎 Verify the sender. If the email claims to be from a College department or another trusted organization, contact them directly through their official contact information instead of replying to the email.
2. 🚩 Report it from Outlook. Use the Report button (look for Report > Report phishing) in Outlook to flag the message. The exact label and location can vary between new Outlook, classic Outlook, and Outlook on the web, so look for the word "Report" in the toolbar or the message's "..." more-actions menu.
3. 📤 Forward it for review. If you are unsure whether an email is legitimate, forward it to the Student Support Help Desk for evaluation.