Beware the wolf in sheep's clothing.

View more video tips on how to outsmart Wolfrid—a wolf in sheep's clothing.

Think before you click—Quick steps

1. Recognize

Verify the sender is who you think it is.

How: Double-click or tap the sender’s name at the top of the email to view the real email address. (In Gmail, hover without clicking.) 

Get more help to recognize >>

2. Rethink

If you can't verify the sender, do not click at all.

How: If the email refers to a known website, type that website address into a new browser window instead and check for information there. 

Get more help to rethink >>

3. Report

Suspect it's a phish? Send the alert.

How: Contact your campus UITS Support Center for help on how to report it. 

Get more help to report >>

Digital sign images laid out

Download these quick steps as digital signs >>

Learn more to boost your defenses

Take free online courses

Take no-cost online training via IU Expand any time.

Explore online classes

Hold "Think before you click" workshops

Request a "Think before you click" session with IT Training.

Schedule a workshop

Escape from the Cybersecurity Escape Room

Build team cohesion and learn about cybersecurity in this fun and immersive experience. 

Request an escape room session

Additional resources and articles

Protect IU: Email & phishing scams

Details on how to spot, plus the dos and don'ts you should know

IU Security Center

Access and manage security tools and features at IU, such as your passphrase, two-step login, third-party access, external email flagging, and more.

Protect IU: Privacy and security training and awareness

Discover recommended training by Protect IU on related topics.

Knowledge Base: What are phishing scams and how can I avoid them?

Get details about what phishing is and ways to avoid.

IU Expand: Email Security Fundamentals

Email Security Fundamentals online courses. Certificate awarded on completion of 5 courses.

Knowledge Base: What is email fraud, and what should I do about it?

Learn about additional types of email fraud and how to spot them.

Knowledge Base: How do I report a phishing attempt?

Get familiar with how to correctly report a phishing attempt to benefit others.

Knowledge Base: How can I be sure that a website is genuine?

Discover ways to tell a scam site (or compromised site) compared to a legitimate one.

Knowledge Base: At IU, how can I keep my passphrase secure?

Learn more about IU passphrase requirements and how to keep secure.

Partnering groups behind Phishing.iu.edu

Phishing.iu.edu is the result of a partnership among the following groups and services at IU:

  • University Information Security Office (UISO)
  • University Information Policy Office (UIPO)
  • IT Communications Office, Office of the Vice President for IT (OVPIT)
  • IT Community Partnerships, University Information Technology Services (UITS)
  • UITS IT Training
  • UITS Support Center