The 
University of Arizona

Phishing

"Phishing” is where fraudsters send spam or pop-up messages to lure recipients into volunteering personal, financial or credential-related information from unsuspecting victims. That information can then be used to commit identity theft, or enter password-protected sites using your account. As phishing schemes become more sophisticated, it becomes increasingly important to be vigilant. 

Learn more about how to spot a bogus phishing message, the important steps you can take to avoid getting “hooked,” and what to do if you've mistakenly responded to a phishing email with your personal information.   


The "Dos, Don'ts and Nevers" of Phishing

  • DO Delete suspicious messages immediately.
  • DON'T click on any links in the message.
  • NEVER respond to an unsolicited email, or supply personal information as requested by an email, even if the message looks real.
  • NEVER supply your passwords or other sensitive information via an email message. No legitimate organization will request your password or other types of sensitive information via an email message.

UA will NEVER ask you to reveal personal information, such as passwords or other restricted data, by e-mail, phone, text or other means of communication. You may be asked to change or strengthen a password but never to disclose it outright via email.


What to do if you're compromised

If you believe you might have inadvertently revealed sensitive university information such as your NetID password, you should change your password immediately. If you have additionally questions, comments or concerns contact the University Information Security Office at iso@u.arizona.edu or 621-UISO (8476).

If you provided personal financial accounts information that could be used for identity theft or fraud in response to a fraudulent e-mail claiming to be sent by outside agencies (PayPal, Wells Fargo or Arizona State Credit Union, for example), you should immediately contact the company being spoofed.


UA Presentations


Resources