Beware the wolf in sheep's clothing.

View more video tips on how to outsmart Wolfrid—a wolf in sheep's clothing.

Think before you click—Quick steps

1. Recognize

Verify the sender is who you think it is.

How: Double-click or tap the sender’s name at the top of the email to view the real email address. (In Gmail, hover without clicking.) 

Get more help to recognize >>

2. Rethink

If you can't verify the sender, do not click at all.

How: If the email refers to a known website, type that website address into a new browser window instead and check for information there. 

Get more help to rethink >>

3. Report

Suspect it's a phish? Send the alert.

How: Contact your campus UITS Support Center for help on how to report it. 

Get more help to report >>

Digital sign images laid out

Download these quick steps as digital signs >>

Learn more to boost your defenses

Take free online courses

Take no-cost online training via IU Expand any time.

Explore online classes

Hold "Think before you click" workshops

Request a "Think before you click" session with IT Training.

Schedule a workshop

Escape from the Cybersecurity Escape Room

Build team cohesion and learn about cybersecurity in this fun and immersive experience. 

Request an escape room session

Additional resources and articles

Protect IU: Cyber Crime

Information about common cyber crimes, including tips to avoid being scammed online.

IU Security Center

Access and manage security tools and features at IU, such as your passphrase, two-step login, third-party access, external email flagging, and more.

IT Training: Privacy and security training and awareness

Discover recommended cyber security training on related topics.

Knowledge Base: Avoid phishing scams

Get details about what phishing is and ways to avoid.

IU Expand: Email Security Fundamentals

Email Security Fundamentals online courses. Certificate awarded on completion of 5 courses.

Knowledge Base: About all types email fraud

Learn about additional types of email fraud and how to spot them.

Knowledge Base: Report a phishing attempt

Get familiar with how to correctly report a phishing attempt to benefit others.

Knowledge Base: Be sure website is genuine

Discover ways to tell a scam site (or compromised site) compared to a legitimate one.

Knowledge Base: Keep your passphrase secure

Learn more about IU passphrase requirements and how to keep secure.

Partnering groups behind Phishing.iu.edu

Phishing.iu.edu is the result of a partnership among the following groups and services at IU:

  • University Information Security Office (UISO)
  • University Information Policy Office (UIPO)
  • IT Communications Office, Office of the Vice President for IT (OVPIT)
  • IT Community Partnerships, University Information Technology Services (UITS)
  • UITS IT Training
  • UITS Support Center