Phishing

Fight the Phish

Fight the Phish Sticker'Fight the Phish' is a phishing awareness campaign designed by the Information Security Office to keep our community safe. We've created materials to help you identify, report, and avoid these types of attacks....

Financial Phishing Attacks

October 11, 2021
Watch out for financial "spear phishing" emails.

These may look like they come from a supervisor or manager and request that you send funds, transfer money, provide banking information, buy gift cards, or provide something of value to the sender.

Spear phishing attacks have increased dramatically over the past few years as scammers get more sophisticated. UC employees have been targeted on multiple occasions. Scammers send realistic looking...

Fight the Phish Marketing Materials

Fight the Phish Sticker

We encourage the UC Berkeley community to take an active role in protecting themselves against phishing attacks.

We've created the 'Fight the Phish' campaign with the below materials to educate faculty, staff, and students on how to recognize and report phishing attacks. These...

The Phish Tank

Welcome to the "Phish Tank"

This page highlights examples of phishing emails received on campus. These examples are intended to educate every Berkeley email user on how to spot a phish. If you receive an email not listed here and that seems suspicious, report it via the methods listed above. For more tips on avoiding phish, visit our Fight the Phish page.

Phishing Example: U.S. Dept. of Labor "Record Update"

January 18, 2016
This is an urgent request to update your employment record at the U.S Department of Labor.

Phishing Example: IRS Service "Important Update"

January 15, 2016
As we prepare to start the 2016 Tax filling season, we have undergone slight changes in the filling process to make filling for your refund easier and to prevent unnecessary delays. Part of the changes include updating our database with your information. Please ensure to carefully complete this verification to avoid hitches in processing your refund. We have sent you an attachment, open it and follow the steps to verify your profile.

Phishing Example: DHL Express Document

January 15, 2016
Dear xxx@berkeley.edu Your parcel (shipping document) arrived at the post office. Here is your Shipping Document/Invoice and copy of DHL receipt for your tracking which includes the bill of lading and DHL tracking number, the new Import/Export policy supplied by DHL Express. Please kindly check the attached to confirm accordingly if your address is correct, before we submit to our outlet office for dispatch to your destination. Label Number: E727D5151D Class: Package Services Service(s): Delivery Confirmation Status: eNotification sent Find attached the full statement information and a full list of outstanding Invoices. Your item will arrive in two (2) days time, and within the agreed credit term as stated on your Invoice. We would like to thank you for using the services of DHL Express. Read the enclosed file for details.

Phishing Example: PayPal Forgery

January 1, 2016
Pay.service Secure Dear Client, Recently, your account was reviewed and flagged because of a potential connection to some fraudulent transactions. To avoid an eventual restriction to your account, please verify your informations by logging in to our Litigations manager.

Phishing Example: "Paperless W2"

January 6, 2016
Dear: Account Owner, Our records indicate that you are enrolled in the University of California paperless W2 Program. As a result, you do not receive a paper W2 but instead receive e-mail notification that your online W2 (i.e. "paperless W2") is prepared and ready for viewing. ​​ Your W2 is ready for viewing under Employee Self Service. Logon at the following link: Click Here to Logon If you have trouble logging in to Employee Self Service at the link above, please contact your Payroll Department for support. If you would like to un-enroll in the Paperless W2 Program, please logon to Employee Self Service at the link above and go to the W2 Delivery Choice webpage and follow the instructions.