Information Technology
Phishing & Scam Messages

Scam messages are everywhere — email, text, DMs, even fake job offers. They often look like they're from MSU, your bank, a professor, or a friend — but they're designed to steal your info, money, or access.
Common Types of Scams
Email phishing – Fake messages from MSU, banks, or services
Text scams (smishing) – “Your account is locked – click here.”
Phone scams (vishing) – Fake tech support or “official” calls
Social media impersonators – DMs with fake support or giveaways
Lookalike Wi-Fi networks – Mimic trusted names to steal your data
Phony login pages – Imitate real sites to grab your password
Phishing Red Flags
- Pressure to act fast or “do a quick favor”
- Requests for gift cards, money, or sensitive info
- Spelling errors or generic greetings like “Dear User”
- Email addresses that look slightly off
- Unexpected links or attachments
If it doesn't feel right, trust your instincts.
What Scammers Want You to Do
- Share your MSU login, password, or MFA code
- Reveal your bank info, SSN, or ID
- Click a link or download a file that installs malware
If you don’t engage, the scam fails.
How to Protect Yourself
- Don't click unexpected links or attachments
- Verify independently - use official MSU websites or contact info.
- Report phishing emails to abuse@morgan.edu and include the email header
- Delete the message after you report it
Watch Out for Fake Jobs
Scammers may pretend to be MSU staff or employers offering quick money.
Warning signs:
- You didn't apply for the job
- They ask you to reply via Gmail or personal email
- They want banking information or copies of your ID
- They ask you to cash a check and send the money
- They pay is suspiciously high for little work
- The message contains typos or vague job details
If You Think You've Been Tricked
- Change you Morgan password immediately
- Report the scam to abuse@morgan.edu and include the email header
- Monitor your accounts for unusual activity
- If money was involved, contact your bank right away
- Save any emails, messages, or screenshots as documentation