Know the Warning Signs
Most security problems start with a message that tricks someone into clicking, signing in, or sharing information. Others show up as changes to your account or device. If you see any of the signs on this page, report it.
In an Email, Text, or Call
One of these signs is a reason to slow down. Two or more is a reason to report.
- It tries to scare or rush you
- "Your account will be suspended in 24 hours." Real organizations rarely demand instant action by email or text.
- It asks for your password, a Duo code, or personal information
- ETS, your college, Canvas, and your bank will never ask for your password or a Duo code by email, text, or phone.
- The sender address does not match
- Look at the full address, not only the display name. Watch for misspellings, extra words, and unfamiliar domains.
- The link goes somewhere else
- On a computer, hover over a link to preview the real address. On a phone, press and hold the link. If the address does not match what the message claims, do not open it.
- It has an attachment you were not expecting
- Be most careful with .zip and .exe files, and with Office files that ask you to enable macros or editing.
- The greeting or wording is off
- "Dear User" in place of your name, or phrasing that does not sound like the person it claims to be from. Well-written messages can still be scams, so do not rely on this sign alone.
- It does not match your real life
- A refund you did not request, a class you are not in, a package you did not order, or a request your supervisor would never make by text.
Common Scams at Colleges
- Fake sign-in pages that copy MyPortal, Canvas, Microsoft 365, or Google.
- Fake password reset or "account expiring" notices.
- Fake Canvas notifications about new messages or expiring course access.
- Financial aid, scholarship, or refund offers that ask you to verify your information through a link.
- Job offers from someone posing as a professor or department, often with high pay for simple work.
- Gift card requests that appear to come from a supervisor, dean, or instructor.
- Payroll or direct deposit change requests sent to employees or to payroll staff.
- Invoice or vendor payment changes asking staff to update bank details.
- Extortion messages claiming to have recorded you or stolen your files. These are almost always mass-mailed bluffs.
On Your Account
- A Duo prompt when you are not signing in. Deny it and report it.
- Password reset notices you did not request.
- Sent messages you did not write, or replies to messages you never sent.
- New mail forwarding rules or filters you did not create.
- Sign-in alerts from places or devices you do not recognize.
- A password that suddenly stops working.
On Your Device
- A ransom message, or files that will not open or have new names.
- Pop-ups saying your computer is infected and telling you to call a number.
- Software, browser extensions, or toolbars you did not install.
- Security software that has been turned off.
- A cursor that moves or windows that open by themselves.
In Person
- A lost or stolen laptop, phone, tablet, or USB drive that holds District data or is signed in to District accounts.
- Someone you do not recognize in a secured area, or asking for access to systems or equipment.
- A USB drive or other device you find on campus. Do not plug it in.
Seen Something?
Do not click, reply, or open attachments. Go to Report a Concern for what to do next.