The Phish Tank

Phishing Impersonation

Welcome to the "Phish Tank"

This page highlights examples of phishing emails received on campus. These examples are intended to educate every Berkeley email user on how to spot a phish. If you receive an email not listed here and that seems suspicious, report it via the methods listed above. For more tips on avoiding phish, visit our Fight the Phish page.

How to report phishing:

  • Open the message

  • To the right of 'Reply' arrow

  • Select 'More' (typically denoted with three vertical dots)

  • Then 'Report phishing'

If you are unable to log into bMail, forward the message to phishing@berkeley.edu

Fake DUO Authentication Request

October 9, 2023
What makes this a phishing message?

This targeted phishing scam impersonates the UC Berkeley Duo Admin to create fear to cause the recipients to act, scanning the QR code which leads to a malicious link.

This targeted phishing scam uses urgency and fear to cause the recipients to act,...Read more about Fake DUO Authentication Request

PHISHING EXAMPLE: Phone Fraud, Chinese Consulate

February 8, 2023
If you are unable to log into bMail, forward the message to phishing@berkeley.edu. For more information visit https://security.berkeley.edu/resources/phishingRead more about PHISHING EXAMPLE: Phone Fraud, Chinese Consulate

Students beware of employment scams via email

November 30, 2023

Every year, students at UC Berkeley are scammed out of thousands of dollars via employment offers that turn out to be fake. Beware of unsolicited emails, phone calls, texts or even facebook messages offering internship or employment opportunities. If you receive a job offer, don’...Read more about Students beware of employment scams via email

PHISHING EXAMPLE: Email Account Removal

May 6, 2022
Dear recipient We have received your cancellation request and you are no longer subscribed to security.berkeley.edu If you did not request cancellation, kindly click below to reactivate your account.Read more about PHISHING EXAMPLE: Email Account Removal

PHISHING EXAMPLE: CAUTION : eMail Account Block

May 6, 2022
Attention recipient , We have received your request to terminate your email account below, and the request will be concluded within 12hours from now.Read more about PHISHING EXAMPLE: CAUTION : eMail Account Block

PHISHING EXAMPLE: Norton

February 15, 2022
Welcome Subscriber; Your Annual membership for NORTON 360 TOTAL PROTECTION has been renewed and updated successfully. The amount charged will be reflected within the next 24 to 48 hrs on your profile of account. Product Information: INVOICE NO. @ GGH1644259106OV ITEM NAME @ NORTON 360 TOTAL...Read more about PHISHING EXAMPLE: Norton

PHISHING EXAMPLE: English Dept. (Prof. Duncan) Job Offers

January 19, 2022
Using several different emails to send from and various subject lines, this attacker used the name of an actual Berkeley professor to send out a call for remote assistant work.Read more about PHISHING EXAMPLE: English Dept. (Prof. Duncan) Job Offers

Fake Cal Store on Instagram

January 19, 2022
Beware of fake Cal Stores on Instagram or other social media platforms.Read more about Fake Cal Store on Instagram

Financial Phishing Attacks

October 11, 2021
Watch out for financial "spear phishing" emails.

These may look like they come from a supervisor or manager and request that you send funds, transfer money, provide banking information, buy gift cards, or provide something of value to the sender.

...Read more about Financial Phishing Attacks

Recognizing & Avoiding Job Scams

September 22, 2021
Are you on the lookout for flexible, part-time employment to help cover school expenses? If so, watch out for scams.

Between the COVID-19 pandemic and high unemployment rates, the pressure to find a job may create more pressure for you to find work quickly. UC Berkeley...Read more about Recognizing & Avoiding Job Scams

PHISHING EXAMPLE: student email directly

September 10, 2021
Hi Student, I am Dr Ralph Abraham, I feel comfortable discussing this WORK- STUDY opening with you since you were referred by the university chamber of commerce. I am very busy, that is why I have asked for your help as my temporary personal assistant. I provide individual and group therapy,...Read more about PHISHING EXAMPLE: student email directly

PHISHING EXAMPLE: WORK AFTER CLASSES OFFER ($500 WEEKLY SALARY)

September 10, 2021
Hello, Are you currently in the US? Here is an opportunity for you to work part time after classes and earn $500 weekly. The job is completely done online and can be completed anytime in the evening/night at home and won't take much of your time daily, you don't have to be online all day and don't...Read more about PHISHING EXAMPLE: WORK AFTER CLASSES OFFER ($500 WEEKLY SALARY)