top of page

PHISHING SCAMS

Phishing scams are fraudulent attempts to trick individuals into revealing sensitive information such as passwords, financial details, or personal data.

 

These scams often impersonate trusted organizations such as universities, banks, delivery services, or government agencies.

​

Members of the University of Toronto community may encounter phishing attempts through emails, text messages, phone calls, fake websites, or social media messages.

Common Phishing Scams

Tuition Payment Scams

Fraudulent messages requesting tuition payments be sent to unauthorized accounts.

image.png

Employment Scams

Fraudulent job offers targeting U of T community members that request personal information or financial transfers.

image.png

Duo Push Scams

Attackers attempt to gain access to accounts by sending repeated multi-factor authentication requests.

image.png

Warning Signs of a Phishing Scam

Common red flags to look out for when identifying phishing scams.

1 / Urgent or Threatening Language

Scammers often try to create a sense of urgency to pressure you into acting quickly. Messages may claim that your account will be suspended, your payment is overdue, or immediate action is required to avoid consequences.

​

Legitimate organizations rarely demand immediate action through unexpected messages.

2 / Requests for Passwords or Personal Information

Phishing messages often ask for sensitive information such as login credentials, banking details, or verification codes.

​

University departments, IT services, and financial institutions will never ask for your password by email or text message.

3 / Suspicious Links or Attachments

Phishing messages may contain links that lead to fraudulent websites designed to look legitimate. These sites are used to steal usernames, passwords, or other personal information.

​

Before clicking a link, hover over it to verify the destination.

4 / Unfamiliar or Misspelled Sender Addresses

Attackers may send messages from email addresses that look similar to legitimate ones but contain slight spelling changes, extra characters, or unfamiliar domains.

​

Always verify the sender before responding.

5 / Unexpected Messages from Authority Figures

Phishing messages may contain links that lead to fraudulent websites designed to look legitimate. These sites are used to steal usernames, passwords, or other personal information.

​

Before clicking a link, hover over it to verify the destination.

bottom of page