HOW TO SPOT A PHISH That’s Phish, Not Fish

What is a phishing email?

A phishing email is a fraudulent attempt to steal your personal information. It may ask you to disclose personal information such as your password or bank details.

Information Services will NEVER ask for your Edinburgh Napier University password or to re-validate your account through an email. If you receive an email asking for this information, delete it.

Legitimate companies may email asking you to login and update your information. If you are in any doubt of its legitimacy it is always safer to visit the company's website directly than following a link. Typing their address into a browser will help make sure you are going to the right place.

How can you recognise a Phish?

Fraudulent emails are not normally addressed to you personally. All the fraudsters know is your email address. It may be addressed to “Dear Valued Customer” or something equally vague. There are a number of things you can do to help figure out if the email is legitimate.

1. Does the email address look like it is from the sender - or is it different?

2. Check the links in the email by hovering (not clicking) your mouse over them. If you are on a mobiledevice Tap and Hold the link.

If the text in the email doesn’t match the link’s true destination you’ll be able to recognise it easily as a scam.

Don’t• Give out your username or password to anyone.• Click on links that ask you to give account details.• Reply to any email you suspect is a scam or phishing attempt.

Do

• Follow the guidance on how to protect yourself from viruses.• Ignore any emails that offer financial gain by transferring funds.• Ignore emails that appear suspicious and unexpected.• Read the claims made by the email carefully - if it seems to good to be true, it probably is.• If an email seems to be from your bank or another familiar company it is safer to contact them directly to

con-firm.• Forward the message to phish@office365.microsoft.com• Protect your password.• If in any doubt delete the email or ask the IS Service Desk.

In Outlook you will see the link like this:

Once you’ve decided that the email is spam then simply delete it from your mailbox. Of course if you’re still unsure please call us or email us on the details below for more help.

Where can I find out more?You will find a lot more information and resources online through the links below.

IS Services Websitestaff.napier.ac.uk/services/cit/infosecurity

Financial Fraud Action UKhttps://www.financialfraudaction.org.uk/

CyberAwarehttps://www.cyberaware.gov.uk/

Take Fivehttps://takefive-stopfraud.org.uk/

Microsoft Safety and Security Centrehttps://www.microsoft.com/en-us/safety/pc-security/default.aspx