Phishing Scams
How do I identify a phishing scam?
How do I report a suspected phishing scam?
The New School community has been the target of a number of phishing campaigns. Unfortunately, no existing technology can detect and block every phishing email. This is why we must all stay alert and follow best practices to identify and report any phishing activity.
Identifying Phishing Scams
When reviewing a suspicious email, ask yourself the following to help identify a potential scam:
- Does it contain an offer that’s too good to be true?
- Does it include language that’s alarming or threatening?
- Is it poorly crafted with misspellings and bad grammar?
- Is the greeting ambiguous or very generic?
- Does it include requests to send personal information?
- Does it stress an urgency to click on hyperlinks or attachments?
- Is it a strange or abrupt business request?
- Does the sender’s email address match the person asking for a response?
Reporting Phishing Scams
Step 1: Report the scam to IT
Please email ITCentral@newschool.edu or submit a ticket to report the phishing scam. This will allow the Information Security & Privacy Office to investigate the scam and help prevent the scam from reaching other members of the community. We will also be able to add the scam to our Phish Bowl to increase awareness.
Step 2: Report the scam to Google (optional)
If you suspect an email is a scam, click the radio button on the right of the email and select “Report Phishing” to alert Google. You can also select “Block Sender” if you are certain that the message is malicious.
TIP: Never forward the email or click on any links or other email addresses.