How to Avoid and Report Phishing Emails

What Phishing Is

A phishing attack happens when someone tries to trick you into sharing personal information online. Phishing is usually done through email, ads, or by sites that look similar to sites you already use. For example, someone who is phishing might send you an email that looks like it's from your bank so that you'll give them information about your bank account.

Phishing emails or sites might ask for:

  • Usernames and passwords, including password changes
  • Social Security numbers
  • Bank account numbers
  • PINs (Personal Identification Numbers)
  • Credit card numbers
  • Your mother’s maiden name
  • Your birthday
Important: The SMCC IT HelpDesk will never ask you to provide this type of information in an email.

Report Phishing Emails

If you identify that an email may be phishing or suspicious, follow the steps below to mark it as phishing. This will notify the IT HelpDesk and prompt an investigation into the email.

  1. Open the message.
  2. Click More
  3. If you're using classic Gmail, click the Down arrow.
    • ​​​​​​​​​​​​​​
  4. Click Report phishing.
Note: When you manually move an email into your Spam folder, Google will receive a copy of the email and may analyze it to help protect their users from spam and abuse.

Avoid phishing attacks

Be careful anytime you get an email from a site asking for personal information. If you get this type of email:

  1. Don’t click any links or provide personal information until you've confirmed the email is real.
  2. If the sender has an SMCC address, notify the IT HelpDesk by calling (207) 741-5696.
Note: The IT HelpDesk will never ask you for personal information, like your password, over email.

When you get an email that looks suspicious, here are a few things to check:

  • Check that the email address and the sender name match.
  • Check if the email is authenticated.
  • Hover over any links before you click on them. If the URL of the link doesn't match the description of the link, it might be leading you to a phishing site.
  • Check the message headers to make sure the "from" header isn't showing an incorrect name.
Important: If you think your SMCC email address has been taken over, notify the IT HelpDesk by calling (207) 741-5696.


Article ID: 84596
Fri 8/9/19 8:23 AM
Thu 12/5/19 8:50 AM