Spot the Phish

If the email or URL looks weird, don’t click. Fake links cost real data!

Online users are often exposed to scams by cybercriminals who send emails that appear to come from valid sources to trick you into revealing personal or financial information. Scammers use tactics such as phishing to manipulate users into downloading malware or giving access to their accounts.

What is Phishing?

It is the act of tricking you into giving away sensitive information or downloading malicious software onto your PC or the university network. The email or link may look legitimate, but it is often a tactic used to obtain confidential information, such as network passwords, or to get you to comply with fraudulent requests.

How to Spot the Phish

• Legitimate IT teams do not request password resets via email links. Always verify through official channels.
• Common phishing indicators include urgent messages, suspicious sender addresses, unexpected attachments, and poor grammar.
• Hovering over links (without clicking) allows you to preview the real URL and identify potential threats.

Report the Phish

• If you receive a suspicious email, report it using our designated channels: it.servicedesk@spu.ac.za or call 053 491 0495. Do not delete it silently or reply.
• Always verify unexpected communications through alternative channels before acting.

Don’t take the bait

• Phishing emails often create a sense of urgency to prompt hasty actions. Stop and verify before clicking any link.
• Be on the lookout for cybercriminals who aim to steal sensitive information, money, or gain access to the network.
• Even professional-looking emails can be fraudulent. Always check the sender details and links for authenticity.

#ThinkBeforeYouClick