Phishing Email Scam: Account Verification Alert

Phishing Email Breakdown 

This phishing attempt aims to create a false sense of urgency by warning the recipient that their McMaster email account may expire unless they verify their address using the link provided. The link leads to a fake login page designed to steal the user’s password. 

Visual Example of the Phishing Email 

Full Text from the Phishing Attempt 

Account Verification Alert! 

Hello {name}, 

You’re receiving this mail because your email account {mcmaster email address} requires verification from 5/26/2025 1:24:34 a.m.. Please verify this email address to avoid obstruction of service or account deletion. 

Verify email address 

This link will expire in one week. If verification is not completed, you might lose your account. Please wait while your request is being verified. 

For help, contact us through our Help Center. 

How to Protect Yourself? 

1. Verify the Sender: Always verify the identity of individuals claiming to be someone important, especially if the message seems out of the ordinary and asks for personal information. 
2. Avoid Clicking on Suspicious Links: Hover over or copy the link to view the complete domain name. Scammers often create URLs that resemble authentic ones by inserting subtle misspellings or extra characters. If the link looks suspicious, it’s safer to visit the official website directly or use a reputable search engine to find the correct webpage. 
3. Review Grammar and Punctuation Carefully: If a message is filled with spelling mistakes, inconsistent sentence structure, or odd phrasing, it may indicate a phishing attempt. 
4. Watch Out for Emotional Triggers: Phishing emails often use fear, sympathy, or urgency (e.g., “Your account will be closed immediately!”) to push users into acting without thinking. Pause, reevaluate the request, and confirm its legitimacy before responding. 
5. Check Branding, Formatting, and Logos Carefully: Phishing emails may imitate official layouts or use low-quality, off-colour logos. Verify that logos, colours, and the overall format matches what you typically see from the genuine organization. 

Important Notes: 

1. Report Suspicious Messages: Reporting phishing attempts helps prevent others from falling victim to these attacks. Send suspicious messages to is-spam@mcmaster.ca for review and investigation. 
2. Educate Yourself: Learn about common phishing tactics. Consider participating in the Information Security Training Program to protect against cyber threats and secure your digital world.