01
Unexpected urgency
“Act now,” “final warning,” or threats that your account will be disabled unless you respond immediately.
PRESSURE TACTICS YOUR DIGITAL SAFETY STARTS HERE
One click can
change everything.
A message that looks familiar can still be a trap. Learn how to recognize phishing, protect your student accounts, and pause before you tap.
UNKNOWN SENDER !
INBOX / 01
?
Student Account Teamno-reply@account-alert…
NOWURGENT: Account access
will be suspended!
will be suspended!
⚠ SUSPICIOUS LINK DETECTED
!
PAUSE BEFORE YOU CLICK
01 / 04
SCROLL TO GET SMARTER01 — PHISHING AWARENESS
01 — THE THREAT
KNOW WHAT YOU'RE UP AGAINST
Not every message
is what it seems.
Phishing is a type of social engineering in which attackers pose as a trusted person or organization to trick you into revealing sensitive information, opening harmful attachments, or visiting unsafe websites.
For students, a convincing message may pretend to be about an account problem, a class update, a delivery, or an urgent request. The goal is to make you act before you think.
BASED ON CYBERSECURITY GUIDANCE FROM CISA ↗
01STOPDon't rush to respond.
02CHECKInspect the sender and link.
03VERIFYUse a trusted channel.
A sense of urgency is
often part of the trick. ↗
often part of the trick. ↗
02 — SPOT THE SIGNS
READ BETWEEN THE LINES
Six red flags
to look for.
One clue doesn't always prove a message is fake. But several warning signs together should make you stop and verify.
02
Unfamiliar sender
A sender address with extra numbers, misspellings, odd domains, or a name that doesn't match the address.
CHECK THE ADDRESS03
Suspicious links
A link's displayed text may hide a different destination. Don't click just because it looks familiar.
INSPECT THE URL04
Requests for secrets
Unexpected requests for passwords, one-time codes, personal details, or payment information.
PROTECT YOUR DATA05
Unexpected attachments
Files you weren't expecting—especially when the message urges you to open them or enable special settings.
DON'T OPEN IT06
Odd wording or details
Unusual greetings, errors, mismatched signatures, or details that don't fit what you know.
READ CAREFULLY✳
Remember: A professional-looking logo or familiar name does not prove a message is legitimate.
CISA phishing guidance ↗03 — BUILD YOUR DEFENSE
SMALL HABITS. STRONGER SECURITY.
Make your accounts
harder to break into.
You don't need to be a cybersecurity expert to make safer choices. Start with these habits.
01↗
Use unique, strong passwords
Use a long, unique password for each account. A password manager can help you create and store them.
02↗
Turn on multi-factor authentication
MFA adds another verification step, making it harder for someone to access your account with only your password.
03↗
Verify through a trusted channel
If a message seems unusual, contact the person or organization using contact details you already trust—not the details in the message.
04↗
Keep devices and software updated
Install updates from trusted sources and keep your security tools enabled.
05↗
Report suspicious messages
Use your email provider's report-phishing option or follow the verified reporting process of the relevant organization.
YOUR DIGITAL LIFE IS WORTH PROTECTING.PAUSE / CHECK / VERIFY
04 — PUT YOUR INSTINCTS TO THE TEST
QUICK CHALLENGE
Would you
spot the trap?
Read this sample message. It is fictional and created for learning. Choose the safest next step.
SCENARIO 01 / 01
✉ SAMPLE INCOMING MESSAGEFICTIONAL EXAMPLE
IT
Campus Account Supportsupport.verify-now@example-mail.com
09:41 AMURGENT: Verify your student account today
Dear Student,
We detected an issue with your account. Your access will be suspended in 2 hours. Click the button below and enter your password to restore access immediately.
This sample sender and message are invented for this educational activity.What should you do?
IT HAPPENS. TAKE ACTION.
Clicked before
you noticed?
Don't panic. Acting quickly can help limit the damage. The right steps depend on what you shared or downloaded.
!
Never share a one-time code with someone who contacts you unexpectedly—even if they claim to be support staff.
01
Stop interacting
Close the page. Don't enter more information or download anything else.
02
Secure affected accounts
If you entered a password, change it from the genuine website or app. Change it anywhere else you reused it.
03
Contact the right support team
Report what happened through a verified channel. If you used a school account, consult the relevant official campus or university support channel.
04
Watch for unusual activity
Review recent sign-ins and account activity. If you entered payment details, contact your bank or payment provider promptly.
✳
BEFORE YOU GO
Pause. Think.
Then click.
Your best defense is a moment of attention. When a message creates pressure, give yourself time to verify.
Back to the top ↑