Tips for avoiding phishing scams:
Never click on links from users and e-mail addresses with which you are unfamiliar.
Never give out usernames, passwords, or other sensitive information via telephone or e-mail. (The IT Support Center will never ask for your password via the phone or e-mail).
Send phishing e-mails as an attachment to email@example.com so they can be blocked.