What is Phishing?
Phishing - a type of cyberattack where scammers use fake messages to trick you into sharing personal information (username, password, bank information, credit card, etc.)
Although the site may look legitimate, even including company logos and slogans, it is still a scam. Any information entered could be stolen and used for identity theft or financial fraud.
**Addresses that end in @cedarville.com or @cedarville.net are NOT real Cedarville addresses.
Phishing Check
If you receive a suspicious email message, DO NOT click on any links or attachments. Follow the steps below to determine further necessary action.
- STOP — Was I expecting this?
Did I expect this email, attachment, invoice, password reset, request, etc.?
-
CHECK — Who is it really from?
Look at the email address, not just the displayed name.
-
THINK — Does the request make sense?
Be cautious if the message asks you to:
- Click a link or open an attachment
- Sign in or verify your account
- Send money, gift cards, or sensitive information
- Change payment or banking information
- Act urgently or secretly
-
LOOK — Does anything seem “off”?
Watch for unusual wording, unexpected requests, strange formatting, or a message that doesn't sound like the person or organization it claims to be from.
-
CHECK THE LINK — Before you click.
On a computer, hover over the link without clicking it. Does the destination look like the legitimate website you expect?
(When you hover over it, the full link will populate across the bottom of your screen.)
-
VERIFY — When in doubt, go another way.
Don't reply to the suspicious email or use the phone number/link it provides. Contact the person through a known phone number, website, or separate message.
The simple version
STOP → CHECK → THINK → VERIFY
STOP: Don't immediately click.
CHECK: Who sent it and where are links taking you?
THINK: Was I expecting this, and does the request make sense?
VERIFY: If you're unsure, confirm it another way.
For a college campus audience, I would emphasize one point above everything else: An email can look completely legitimate and still be phishing. Don't judge it by the logo, colors, signature, or person's name alone.
**If you are concerned about needing to take action, forward the email to phishing@cedarville.edu. Cedarville IT will review the email and then provide further instructions.