If you think you got a phishing email, please follow these steps:

  1. Don’t panic!  Take a deep breath and read the email message thoroughly.  The phishers are counting on upsetting you so much that you don’t read the message very well.  You can stop them right now by paying attention to all the details in the email message.
  2. Who sent the message?  Look at the name and email address.  Look that person up in the myBucknell Online Directory.  Does the sender work for Library & IT? If they are in the Directory, call them! Ask if they really sent the email and if they did, what they are asking you to do.  If the email address does not end in @bucknell.edu and the sender is not in the Directory, then the message is fake!
  3. Look at the URLS or links in the message.  Real messages direct you to go to Bucknell Account Management (BAM). The real Bucknell website is at www.bucknell.edu. Is that where the link is taking you? If not, the message is fake!
  4. Look at the grammar and spelling.  Fake messages can be filled with terrible spelling, grammar, and punctuation.  Library & IT messages might not be 100% perfect every time, but they sure don’t have 5 spelling errors per sentence.
  5. Consider the threats.  Fake messages warn you that something terrible will happen NOW unless you enter your username and password.  Really? Login to myBucknell.  Click on Profile and Accounts in the top left corner.  Scroll down to Bucknell Password.  How many days until your password expires? Library & IT doesn’t threaten you with deactivating your account or deleting your storage. If a message does, then it is fake!
  6. Now if you still can’t tell, forward the email message to the Tech Desk, techdesk@bucknell.edu.  We’ll happily explain to you that Bucknell is not in Belarus or Bulgaria, that Bucknell colors are not purple and gold, and that we know how to spell “IT”.

If you receive a phishing email, follow these instructions to report phishing to Google.

If you give your password away to a phishing scheme, contact the Tech Desk and CHANGE YOUR PASSWORD IMMEDIATELY!  (Yes, writing in all caps is yelling.)

How many hints can you find that this message is a fake?



For additional information or assistance, please contact the Tech Desk at 570.577.7777 or techdesk@bucknell.edu.

Keywords: phishing, spam, bmail, gmail, email, security, cyber, cybersecurity