Phishing scams are, unfortunately, nearly impossible to block, so it's important to be able to identify scam emails and avoid acting on them. It's better to delete them, but if one has been opened, it's best not to click on anything. The emails can be quite convincing, but they have telltale signs that give away their intent, beyond terrible grammar and spelling that may be present in the body of the email.
Link: IT Department Contact Information
The "From" email address looks odd.
Does the email address match the "sender"?
- For example: From: Seark Support Team <ivpoir@gmail.com>
The email address may look like gibberish, or it may be from a domain that has nothing to do with the sender. That's a red flag. When in doubt, contact the supposed sender by a means OTHER than responding to the email (for example, if it's a bank, call the bank and ask about the email).
The sender is offering "quick" or "easy" money, or attractive prizes.
Maybe its a new iPhone, or a a lottery winning. Maybe it's a job opportunity, or a survey that will result in a payment. Just click the link to get started! NEVER click the links. Do mouse over them to see the real address, however. Sometimes they may look only slightly misspelled, but a misspelled link is a bad link. Better to avoid them then use them "just to see".
The sender requires quick action, or the action is "threatening"
The sender is creating a sense of urgency; the recipient must act now or else! Examples of this include limited time offers, or a limited number of people may be eligible based on response times; it could also be an "order confirmation" of an expensive item on your account. Examples of a threat could include losing access to an account, by lock out or deletion. No matter what it is, the sender wants you to act and act NOW.
The sender is asking for personal information
Or maybe the sender is asking you to fill out a form. No matter what, no legitimate business is going to ask for your password or social security number in an email, and you should not share any personal information with anyone.
There's an attachment I didn't expect.
Again, it could be an invoice, a "fax", or some other document, depending on the content of the email. NEVER open unexpected attachments, no matter who sends them. Attachments can contain ransomware, keyloggers, or even viruses; the best way to deal with it is to ignore it. If you open an attachment, your system could be compromised, in addition to your account.
Every one of these are red flags, and an email containing any one of these features (let alone multiple categories) is an email best deleted. If you receive an email with any of these features and aren't sure- EVEN if it looks like it came from SEARK- contact the IT Helpdesk for verification.
Accidents happen, so if you click a link in one of these emails and attempt to login to a "portal", or fill out a form, please contact the IT Department right away so we can help secure your account immediately. When in doubt, reach out.
Link: IT Department Contact Information