What phishing looks like
Phishing emails pretend to be from someone you trust. They try to steal your password, your money, or your identity.
They work because they look convincing. But they nearly always have tells.
The six signs
"Your account has been compromised. Act now." "Your mailbox is full. Delete messages or lose access." Real organisations do not pressure you like this.
Check the full address, not just the display name. service-desk@scu-support.com is not the same as servicedesk@scu.edu.au. Hover over the name to see the real address.
"Dear valued customer." "Dear student." Real emails from SCU usually address you by name.
Hover over any link before clicking. Does the address look right? scu.edu.au.login-page.xyz is not SCU.
Were you expecting a ZIP file or PDF? If not, do not open it. Attachments often carry malware.
No legitimate SCU email will ever ask for your password. Ever. Delete it.
What to do
If you think an email is phishing:
- Do not click anything
- Do not reply
- Forward it to Technology Services
- Delete it
Examples
A real SCU email will typically:
- Address you by name
- Come from an @scu.edu.au address
- Not ask for your password
- Not create false urgency
- Give you a way to verify independently (phone number you can look up yourself)