Scam emails or ‘Phishing’ attacks are on the rise

Phishing emails are getting cleverer, more realistic and more frequent. We are all exposed to them personally and while at work, so it is important that we equip ourselves to spot them. 

At this time of year, universities can see a rise in fake emails aimed at students/staff, pretending to come from companies like Student Loans Company (SLC), UCAS, GOV.UK, HMRC (tax), IT Support or even from an email address that looks very like someone from the University.  

These scam emails are trying to steal your personal data by asking you to do something like update your username/password or enter your bank account details. Sometimes they can be offering you money, refunds or prizes... 

Here are some useful ways to spot these fake emails: 

• Look at the email address, not just the sender’s name. Make sure it is a valid company address (Microsoft, for example will never send you an email asking you to log in, from a colleague’s/teacher's email address.)
• Look again at the email/web address. Some false addresses look very like the real ones.  
• Look for grammatical mistakes, not just spelling mistakes. When crafting Phishing messages, scammers will often use a spellchecker or translation machine, which provide all the right words but not necessarily in the right context.  
• Hover your mouse over any links. Before you click on a link ensure the web browser address is the one you expected to reach and not a fake website.  
• Look out for a sense of urgency. If the email is rushing you into doing something, (even if from your boss or teacher), before you respond, contact the sender using a different method, to check it is from them. 
• Follow your instincts, if it feels dodgy, it probably is! 

If you notice a scam email in your inbox, please mark it as Phishing, by selecting the ‘Junk’ option in your email window and then ‘Phishing’. Doing this helps to improve the effectiveness of the SPAM filter. 

All staff and student Office 365 email accounts are continually monitored for any suspicious activity. When we become aware of a Phishing attack, any harmful links are blocked as soon as technically possible. If an account is suspected of being compromised it is immediately disabled and IT Support contacts the owner of the account. 

If you have any concerns about a fake email, please get in touch with IT Support using the portal or by phone on 01902 322000. 

There is more advice and guidance at www.wlv.ac.uk/its/essentials/cybersecurity