Recognizing and Stopping Phishing Scams

Four tips to be secure on the Internet.

The fall semester is just around the corner and the number of phishing and scam emails received by the Purdue community is on the rise. Purdue System Security would like to remind everyone that it is important to stay vigilant and strive to protect your account and personal information.

Phishing attacks attempt to gain access to your accounts or even scam someone else using personal information you provide. The attacks are intentionally sneaky and seemingly trustworthy, often appearing to be sent by someone affiliated with Purdue, possibly in your contacts. Be aware that just because an email is from a address does NOT necessarily mean it is legitimate or safe!

Be wary of any emails that request you to:

  • Provide or confirm personal information (PUID, password/PIN, banking information, phone number)
  • Verify your email
  • Reset your career account
  • Prevent account from being deleted
  • Purchase a piano
  • Apply for a job as a personal assistant
  • Immediately read an important document
  • Urgently click a hyperlink that does not lead to a website

ITaP (Information Technology at Purdue) will NOT ask for your credentials or for you to change your password via email.  You must call the Customer Service Center at (765) 494-4000, visit one of their help desks, or navigate to ITaP’s website to change your password.

Similarly, the Office of Student Employment does not ask other students or staff to send emails of job offers available across campus. To browse the latest student jobs on campus visit their website.

To report suspicious or malicious emails to the security team, please utilize the Report Message button inside of Outlook, which can be found in the top banner or by right-clicking an email in Outlook on the web (OWA). You can also report emails directly by forwarding them to

To learn more about how to better spot phishing and scams please read through: