Take Steps to Fight Phishing

Be on the lookout for common phishing tactics.

Phishing emails are one of the greatest information security threats facing organizations like Emory. Many may believe that deleting a suspicious email is adequate to keep our organization safe, but reporting these messages allows us to proactively take action against them to prevent others from falling for the same lure.

• New reporting option: To help make the reporting process easier, Emory has deployed a new feature that allows you to report suspicious/phishing messages with the click of a button. Learn more, and spread the word. 

Your safety is our priority

Please be on the lookout for these common phishing scams tactics targeting college students, faculty, and staff:

Appeals for emergency assistance
You receive an email that seems to come from a friend, professor or supervisor seeking emergency financial assistance in the form of gift cards. Look carefully at the sender’s email address. Does it end with @emory.edu? Messages from outside the Emory network will have "[EXTERNAL]" appended to the subject line. Urgent emails may ask you to connect via text messages only, and they will make excuses to avoid talking with you directly. This is an attempt to move the conversation away from Emory's email system. Do not send gift cards as payment. They are difficult to track. Do not wire money. Share the message with Emory IT immediately. Click the Report Phishing button in the toolbar of your Outlook window. Check out detailed instructions here, and spread the word. 

Offers that are too good to be true
Individuals will offer $400 a week to perform basic tasks. They will send a check for much more than $400, asking you to make minor purchases, and then return the balance using gift cards or a money order. No reputable government agency or Emory employer will expect payment in gift cards. If you did not formally apply for a role through sites like EagleOps, Indeed or Monster, do not accept the offer. Also beware of job offers that originate outside the @emory.edu network. Click the Report Phishing button in the toolbar of your Outlook window. 

Threats to your academic standing or immigration status
An email, text or call warns that you are in jeopardy of losing your immigration status or academic standing if you do not send a “fee,” “penalty, or “tax” as payment. They may threaten that you will be prosecuted or deported unless you pay the fee. Phone calls may appear on a caller ID to be coming from the Federal Bureau of Investigation (FBI), U.S. Customs and Border Patrol (CBP), or the Internal Revenue Service (IRS). The caller may know information about you and speak in an intimidating manner. Hang up. Emails or texts may claim to be from your home government or a U.S. government agency. Do not respond. Click the Report Phishing button in the toolbar of your Outlook window. 

Requests for personal information
Never provide your network ID, Social Security number, address, or passport information via email or text. Use the Emory University student, faculty or staff portals to access and share official account information.  

Blackmail attempts 
Some scammers have tricked people into sharing explicit photos. They will threaten to blackmail by sharing the photos, unless you pay a large sum of money. Be very careful about sharing anything you would want to keep private. Contact police@emory.edu anytime you are being threatened.

If you receive an email, text, or phone call requesting something strange or demanding large sums of money, SLOW DOWN. Do not rush to act. Check the email address of the sender. Before responding or taking the requested action, ask yourself and others if this could be a scam. When in doubt, email police@emory.edu or call 404-727-6111 for assistance. We are available to support you 24/7.