The IT Support Center will never ask for your password via the phone or email. If in any doubt about the validity of an email message, use the Phish Alert Button to report the message.


"Dear IUP Email subscriber..."

"Confirm your Webmail account..."

"Your Email account upgrade..."

When using email, you may come across suspicious messages. Some of these messages can be phishing attempts. Phishing messages will often ask you for personal information such as your password or credit card information. They may also try to convince you to perform a certain action, such as click on a link, open an attachment, send a mobile phone number, send money, or buy gift cards. These messages are often crafted to appear like they came from a trusted authority or someone you know. It is important to be vigilant when using email.

Noticeable signs of a phishing scam include the following:

  • Messages from another user in the organization that appear to have characteristics of a phish email may be a sign that the user's account is compromised and is being used to phish you.
  • Messages that ask for personal information such as username, password, mobile number, bank account, or credit card number.
  • Messages with a sense of urgency. For example, "Your account needs upgraded. Click this link or it will be deleted."
  • Messages with an attachment that you weren't expecting. These often look like they are coming from a reliable source, but they are not (e.g., FedEx, Credit Card Companies, the IRS).
  • Messages that ask you to perform tasks like buying gift cards.
  • Messages that have a generic greeting rather than using your name (Dear Customer, Dear User, etc.).
  • Messages with poor grammar or spelling mistakes.

Ways to avoid phishing scams:

  • Never click on links or open attachments from users and email addresses with which you are unfamiliar.
  • Review the actual email address of the sender of the email to ensure it is valid.
  • Never give out usernames, passwords, or other sensitive information via email or telephone.

Learn other ways to stay safe online.

IRS Tax Scams and Consumer Alerts is a web page published by the IRS informing taxpayers of common scams.

Phishing Examples

Learn to spot a phishing message with a few common examples

Other resources from the Federal Trade Commission

Some FTC training videos