Recognize and Report Phishing Emails

Overview

Phishing is a common cybersecurity threat that uses fraudulent emails, text messages, phone calls, and websites to trick people into revealing sensitive information or installing malicious software.

Cybercriminals may impersonate Cedar Crest College, Microsoft, financial institutions, delivery services, or other trusted organizations.

Learning how to recognize and report phishing attempts helps protect your personal information, your FalconNet account, and the Cedar Crest College community.

How to Recognize a Phishing Attempt

Phishing messages often appear legitimate but may contain warning signs.

Be cautious of messages that:

  • Create a sense of urgency: Claim your account will be disabled, your password will expire, or immediate action is required.
  • Request sensitive information: Ask for passwords, verification codes, financial information, or other confidential details.
  • Contain suspicious links: Direct you to unfamiliar websites or login pages that imitate legitimate services.
  • Use unexpected attachments: Include files you were not expecting, particularly from unknown senders.
  • Impersonate trusted individuals: Appear to come from a supervisor, coworker, college department, or familiar organization.
  • Contain unusual requests: Ask you to purchase gift cards, transfer money, change payment information, or approve an unexpected MFA notification.

Important: A phishing email may look professional, use official logos, and contain correct spelling and grammar. A familiar sender name or logo does not guarantee that a message is legitimate.

How to Protect Yourself

Follow these cybersecurity best practices:

  1. Think before you click. Avoid opening unexpected links or attachments.
  2. Verify the sender. Check the actual email address, not just the displayed name.
  3. Check links before opening them. On a computer, hover over a link to preview its destination. On a mobile device, use caution with links you cannot easily verify.
  4. Use trusted websites. Navigate directly to known websites rather than following unexpected email links.
  5. Never share your password or MFA verification codes. Cedar Crest College IT will not ask you to disclose your password or authentication codes.
  6. Be cautious with MFA requests. Never approve a sign-in notification you did not initiate.
  7. Keep your devices updated. Install operating system, browser, and application security updates.

When in doubt, verify a request through a known, trusted communication method rather than replying to the suspicious message.

How to Report a Phishing Email in Outlook

If you receive a suspicious email in your Cedar Crest College Microsoft 365 account, report it using Outlook's built-in reporting feature.

Outlook on the Web or New Outlook

  1. Open Outlook and select the suspicious message.
  2. Select Report from the toolbar, or locate the reporting option under the message's additional actions (...).
  3. Select Report phishing.
  4. Confirm the report if prompted.

Classic Outlook for Windows

  1. Select the suspicious email.
  2. On the Home tab, locate Report or Report Message.
  3. Select Phishing or Report phishing, depending on your Outlook version.
  4. Confirm the report if prompted.

The exact location of the reporting feature may vary depending on your Outlook version.

Do not forward suspicious emails to coworkers or classmates. Use the reporting feature so the message can be submitted for security review.

What to Do if You Clicked a Suspicious Link

If you clicked a suspicious link, take action based on what happened.

If You Clicked a Link but Did Not Enter Information

  1. Close the suspicious website.
  2. Do not download files or enter personal information.
  3. If you downloaded a file, do not open it.
  4. Report the suspicious email through Outlook.
  5. Submit an IT Support Request if you downloaded a file, noticed unusual device behavior, or are unsure whether your information was exposed.

Simply opening a website does not necessarily mean your account has been compromised, but suspicious activity should be investigated.

If You Entered Your FalconNet or Microsoft 365 Password

Take these steps immediately:

  1. Change your password using Cedar Crest College's legitimate password-change process. Do not return to the suspicious website.
  2. Report the incident to IT immediately. Your account may be at risk even if you have already changed your password.
  3. Review your MFA activity. Do not approve unexpected authentication requests.
  4. Follow IT's instructions. Additional security actions, including signing out active sessions, may be necessary.

If you use the same password for another account, change that password as well.

If You Approved an Unexpected MFA Request

An unexpected MFA approval may allow someone else to access your account.

  1. Report the incident to IT immediately.
  2. Change your password using a trusted sign-in page.
  3. Deny any additional unexpected MFA requests.
  4. Follow IT's instructions for securing your account.

If You Opened an Attachment or Installed Software

  1. Stop interacting with the suspicious file or application.
  2. Do not run additional files or follow instructions provided by the suspicious message.
  3. Contact IT immediately for assistance.
  4. Follow IT's instructions regarding disconnecting your device from the network, scanning for threats, or other security measures.

Do not attempt to remove suspected malware yourself unless directed by IT.

If You Shared Financial or Personal Information

If you entered credit card information, banking details, or other sensitive personal information:

  • Contact the affected financial institution immediately.
  • Change passwords for affected accounts.
  • Monitor your accounts for unauthorized activity.
  • Report the incident to IT if it involved your Cedar Crest College account, college information, or college-owned equipment.

What Happens After You Report a Phishing Email?

Reported messages can be reviewed to determine whether they are malicious.

Depending on the threat, additional steps may include:

  • Investigating suspicious links or attachments.
  • Blocking malicious senders, domains, or websites.
  • Identifying related suspicious messages.
  • Securing affected accounts or devices.
  • Providing additional instructions to impacted users.

You may not receive an individual response to every reported message.

Need Additional Assistance?

If you need help identifying a suspicious message or have questions about protecting your account, submit an IT Support Request.

If you believe your account has been compromised, you entered your password on a suspicious website, or you approved an unexpected MFA request, contact the IT Help Desk immediately at helpdesk@cedarcrest.edu or by phone at 610-606-4635.

Do not wait for a routine support request response when you suspect an active security incident.

Print Article