PHISHING EXAMPLE: student email directly

September 10, 2021

What makes this a phishing message?

This very simple, but effective, targeted phishing scam used a fake job offer to establish rapport with recipients and collect personal information. 

There are a few clues that the message is a forgery:

  • The criminal is sending from a gmail.com account instead of an @berkeley.edu address
  • The criminal claims his name is Ralph Abraham despite his email address's name being Tyler Lee

Tips if Something Seems Off:

Double-check the email address before responding

Look to make sure the email address is correct. In Gmail hover your mouse over the sender name for the email to display. On a mobile phone or a touchscreen, press and hold the link (don't tap!) to reveal the actual URL. (Look in the bottom left corner of the browser window.) Don't click on a link unless it goes to a URL you trust.

Follow up with the sender separately

If you didn’t expect it, reject it. Or follow-up with the individual directly in a separate email or call/text to confirm.

Report and/or flag it

  • Open the message

  • To the right of 'Reply' arrow

  • Select 'More' (typically denoted with three vertical dots)

  • Then 'Report phishing'

If you are unable to log into bMail, forward the message to phishing@berkeley.edu For more information visit https://security.berkeley.edu/resources/phishing

Original Message:

From: Dr Tyler Lee <am7218029@gmail.com>
Date: Mon, Sep 6, 2021 at 5:02 PM
Subject: Student email directly



Hi Student,
I am Dr Ralph Abraham, I feel comfortable discussing this WORK- STUDY
opening with you since you were referred by the university chamber of
commerce. I am very busy, that is why I have asked for your help as my
temporary personal assistant. I provide individual and group therapy,
coaching, assessment and many University students with academic
difficulties and no prior diagnosis are seen and assessed through the
academic screening and assessment process.

You have received this email because you have an offer from the
University Office to help Students with Disabilities to work with me
while we help Students with disabilities frustrated with ignorance and
lack of services but as my temporary personal assistant

This is a very simple employment, You will only help me Mail letters,
Make payments at retail stores and purchase some Items when needed. This
employment only takes an hour a day and 4 times a week for $1,825
weekly. I am unable to meetup for an interview because I am currently
away and helping the disabled students in Australia.


Dr Ralph Abraham CONTACT ME BACK AT
Ralphabraham542@gmail.com For more information ?

Warning:  The links and email addresses included in these messages are from real-life examples, do not attempt to explore them.

The most dangerous links have been removed - you can hover your cursor over these links to see the original address in a pop-up techtip (instead of in the corner of the browser window).

How to report phishing:

  • Open the message

  • To the right of 'Reply' arrow

  • Select 'More' (typically denoted with three vertical dots)

  • Then 'Report phishing'

If you are unable to log into bMail, forward the message to phishing@berkeley.edu