Phishing Scams

Cupola atop a building on the Molloy University campus

Phishing is a form of online fraud where scammers impersonate legitimate organizations or individuals to trick you into revealing sensitive information such as passwords, bank details, or personal data.

These attempts often come through email, text messages, or social media and are designed to look convincing. The goal is to steal your information or money, or to gain access to your accounts. 

Below is an example of a phishing email. Phishing scams often appear to come from trusted sources, such as a Molloy University office or familiar organization, but there are clear warning signs to look for:

  • Always check the sender’s address carefully; in the example shown below, the message falsely claims to represent Molloy University but comes from a non-Molloy email domain: "2139622@student.uma.pt." Legitimate University communications will always come from an official “@molloy.edu” address.
  • Be wary of urgent or threatening language, such as an email pressuring you to act immediately. Examples include: “Apply now,” “Your account will be closed,” or “You must verify today.” The below example uses this false urgency: "Important Notice: Apply as soon as possible."
  • Be cautious of emails that contain grammatical errors and inconsistent formatting; highlighted in the example shown below, the email contains the following awkward grammatical errors: "HOURS: 1 hours per week And 3days in a week." Poor grammar, awkward phrasing, or random capitalization can indicate a scam.
  • Suspicious links or attachments. Hover over links before clicking them to see where they actually lead, and never open unexpected attachments.

*** THE BELOW EMAIL IS A PHISHING SCAM ***

 An email used as an example of what phishing scams look like. The email's origin is from a non-molloy email with grammatical typos in the body.

Below is another example of a phishing attempt via a PDF file attached to an email. Although the formatting seems legitimate, there are several clear giveaways:

  • Listed contact information is not from Molloy University's network. The advertisement below lists a number that does NOT begin with "516-323-xxxx." Only trust or accept calls from Molloy staff/administration that begin with "516-323-xxxx."
  • Too-good-to-be-true offers. Promises of easy money, large payments for little work, or exclusive opportunities are often bait.
  • Generic greetings. Phishing emails may start with “Dear Student” instead of using your real name.
  • Conflicting or contradictory information. The below phishing job advertisement seeks students with "strong analytical and computer skills" in the opening, but "Basic computer proficiency" in the position details.
  • The sender requests personal/contact information. Unknown contacts that offer a generic greeting such as "Dear Student" and also ask for "Required Information" (i.e. personal/contact information) are often untrustworthy.

*** THE BELOW PDF IS A PHISHING SCAM ***

a job listing that is a phishing scam attempt

Recognizing and reporting phishing attempts helps protect both your personal security and the Molloy University community. What to do if you encounter a potential phishing scam:

  1. Never click links, download attachments, or provide personal information unless you are certain of the message's authenticity.
  2. Report suspicious emails/texts/calls immediately to the Molloy University IT Help Desk at 516.323.4800