Spam/Scam Advice | Information Security | SIU

How can I tell if an email is a phishing attempt?

When you get an email that seems suspicious, follow these tips to avoid becoming a victim of phishing.

• • Look at the URL of any link included in an email. Phishing emails typically include a link. Scammers want you to click this link to gain access gain to your computer or access to your sensitive data. Beware! Hover over any link to see where it is taking you before you click. If you do not recognize the URL, do not click the link.
    
    
  • Watch for poor spelling and grammar. Scammers have become very sophisticated. Many now use specialized translation tools; improper grammar and spelling are no longer a giveaway. Remember that official SIU emails are always spell-checked, and should be error-free.
    
    
  • Beware of urgent or threatening language. Do not trust emails that say “your account has been suspended” or “verify your information.” Scammers use language like this to get your attention. Students should also be aware of requests for financial aid documents, job offers, and email account information. If in doubt, call the University office responsible the request.
    
    
  • Phishing can happen anywhere, to anybody. When in doubt, report scam email with the use of the Phishing Alarm button in Outlook or call SalukiTech at 618-453-5155.

Report Suspicious-Phish Alarm

To report a suspicious message is has been simplified by the addition of the Report Suspicious-Phish Alarm in Microsoft Outook.

Finding the Report Suspicious-Phish Alarm button in Outlook

If you are using Outlook on your desk- or laptop you should have no problem locating the Report Suspicious-Phish Alarm button. It is in the upper right corner of the screen, looks like a button, and is clearly labeled Report Suspicious-Phish Alarm. Click the Report Suspicious-Phish Alarm button to report any suspicious email.

After reporting an email, you will get an immediate confirmation, followed in less than 15 minutes by an email explaining if the reported email is potentially harmful;and if you need to take any action.

Finding the Phish Alarm in Outlook on the web

Finding the Report Suspicious-Phish Alarm in Outlook on the web is a bit more complicated. First, know that you are looking for the Report Suspicious-Phish Alarm within the email that you want to report. With the email open (as is below) notice the Like, Reply, and Forward commands, as well as the ellipses.

Click the ellipses to open a dropdown list of options.

The Report Suspicious-Phish Alarm option is located near the bottom of the list.

Note: In Outlook on the web, it is called "Report Suspicious."

Click the Report Suspicious option to report the email.

After reporting an email, you will get an immediate confirmation, followed in less than 15 minutes by an email explaining if the reported email is potentially harmful and if you should take action.

Ignore the "Security options" or "Mark as phishing" selections.

In Outlook on the web, you may see Security options or the Mark as phishing option as you scroll through the dropdown menu. Although helpful in the broad scheme of things, the Microsoft Mark as phishing option does not report to our first-line security system Proofpoint. We encourage you to use the Report Suspicious option at the bottom of the dropdown menu. This option provides both you and our Information Security Team with additional information to help reduce malicious attacks.

Finding the Phish Alarm on your Android phone

If you are using the Outlook app on your Android phone, you should have no problem locating the Report Suspicious-Phish Alarm. While in an email, click the ellipses (found under the time, not the ellipses found at the top of the screen). A half-screen opens with the mail controls and add-ins menu. The Report Suspicious-Phish Alarm icon is located in this screen. Here, the Report Suspicious-Phish Alarm icon is not labeled; look for an envelope on a fish hook.

Click the icon to report the phish.

After reporting an email, you will get an immediate confirmation, followed in less than 15 minutes by an email explaining if the reported email is potentially harmful and if you need to take any action.

What can I do to prevent spam?

Another way to think about Spam messages is to compare them to junk mail received in a postal mailbox. These pieces of mail are not harmful, just annoying. The recommended procedure for dealing with "regular" annoying spam is to:

1. Log into your Office 365 account.
2. Find the spam message.
3. Click the checkbox next to it.
4. Right-click the message, and choose junk. 

Managing spam this way helps Microsoft increase the accuracy of their spam filters. It also decreases the likelihood that similar messages will get through to others users in the future. Regular spam does not need to be reported to Information Security.