Phishing Scams

Phishing is an attempt to steal your personal information, usually via a fraudulent email, text, phone call, or even a Teams message. Cyber criminals often send a message that looks like it is coming from a source you trust or recognize — such as your bank, a major employer, a technology company, or your school or workplace.

The goal of phishing scams is to gain access to your login information, including passwords and security codes, which scammers can use to access your accounts or obtain your personal data. They want you to click on a link that leads to a website designed to look like one you trust or give them information over the phone that gives them access to your accounts.

In other cases, you may be encouraged to open an attachment, which could then install malicious software (malware) on your device.

Phishing can put you at risk of financial loss and may leave you unable to access your own accounts. It can also cause you considerable stress and anxiety.

Tips to Help You Spot Phishing Emails

Phishing scams are often sophisticated, and fraudulent emails can look very convincing. The safest strategy is to never click on a link or open an attachment in an email you weren’t expecting unless you first verify that it is a legitimate email — even if the sender seems to be a person or business you recognize.

Before you click on a link or take any other action, confirm that an email or phone call is legitimate by contacting the (presumed) sender directly using the contact information posted on their website. Phone numbers or email addresses contained in a suspicious email may not be legitimate, so always confirm you’re using the correct contact information. In the case of a bank or credit card company, you can contact them via the phone number on the back of your credit/debit card.

  • spelling or grammatical errors
  • words like “Urgent” or “Act Now”
  • sender’s email does not match the name of the sender
  • messages designed to make you panic, such as warnings that your account will be closed immediately
  • job offers (or other opportunities) that sound too good to be true, especially if someone is contacting you about a job for which you haven’t applied

What to Do If You Receive a Suspicious Email

Penn State World Campus students who receive a suspicious email can report it by forwarding the email to [email protected].

You can also reach out to Penn State’s Office of Information Security at [email protected] with any questions or concerns.

Stay Informed About Phishing

Visit Penn State’s Office of Information Security website regularly to learn more about phishing and review updates about the latest phishing scams.