Phishing Awareness Guide
What is Phishing?
Phishing is a type of cyber attack where criminals pretend to be legitimate organizations (like Three Rivers College, your bank, or popular services) to trick you into:
- Revealing personal information (passwords, Social Security numbers, credit card details)
- Clicking malicious links that install malware
- Downloading infected attachments
- Transferring money or gift cards
How to Identify Phishing Emails
📧 Check the Sender
Look carefully at the email address. Phishing emails often use addresses that look similar but aren’t quite right:
❌ admin@trcc.net (note the “.net” instead of “.edu”)
✅ admin@trcc.edu (legitimate TRC domain)
🎯 Sense of Urgency
Phishers create panic to make you act without thinking:
- “Your account will be closed in 24 hours!”
- “Immediate action required!”
- “You’ve won a prize – claim now!”
🔗 Suspicious Links
Hover over links (don’t click!) to see where they really go:
✍️ Poor Grammar
Many phishing emails contain:
- Spelling mistakes
- Awkward phrasing
- Generic greetings (“Dear User”)
🚩 Major Red Flags
Requests for Personal Information
Legitimate organizations never ask for passwords, SSN, or credit card numbers via email.
Unexpected Attachments
Don’t open attachments from unknown senders, especially .exe, .zip, or .scr files.
Too Good to Be True
Free scholarships, lottery winnings, or jobs requiring no interview are likely scams.
Mismatched URLs
The link text says “trcc.edu” but hovering shows a completely different website.
Requests for Payment
Especially via gift cards, wire transfers, or cryptocurrency.
Impersonation
Emails claiming to be from the President, IT Department, or Financial Aid with unusual requests.
What Should You Do?
🤔 If You Receive a Suspicious Email:
- Don’t Click Anything – Don’t click links or download attachments
- Don’t Reply – This confirms your email is active
- Verify Independently – If the email claims to be from TRC, contact the department directly using contact info from the official website
- Report It – Forward the email to TRC Information Security: phish@trcc.edu
- Delete It – Remove the email from your inbox and trash
🚨 If You Already Clicked or Gave Information:
- Act Immediately – Time is critical
- Change Your Passwords – Start with your TRC account, email, and banking
- Contact the Welcome Center – Call 573-840-9605 or visit in person
- Monitor Your Accounts – Watch for unauthorized activity
- Run Antivirus Scan – If you downloaded anything
Real-World Examples Targeting Students
Example 1: Fake Account Verification
Subject: URGENT: Verify Your Student Account Within 24 Hours
Dear Student,
Your Three Rivers College email account requires immediate verification. Failure to verify within 24 hours will result in account suspension.
IT Department
- Suspicious email domain (not @trcc.edu)
- Creates false urgency
- Generic greeting
- Legitimate IT won’t ask you to verify via email link
Example 2: Fake Scholarship/Financial Aid
Subject: You’ve Been Selected for $5,000 Emergency Grant
Congratulations!
You have been selected to receive a $5,000 emergency student grant. To claim your funds, please provide:
- Full name and student ID
- Social Security Number
- Bank account information for direct deposit
- Wrong domain name
- Unsolicited money offer
- Requests sensitive personal information
- Real financial aid office uses official processes
Example 3: Fake Job Offer
Subject: Easy Work From Home – $3,000/week
Hello,
We’re hiring students for part-time work from home. No experience needed! Earn $3,000/week.
Job involves receiving packages and reshipping them. We’ll send you a check to cover supplies.
Reply with your mailing address to get started!
- Unrealistic pay for minimal work
- Vague job description
- No formal application process
- This is a common “reshipping” scam that uses students as unwitting accomplices
🎓 Best Practices for Students
✅ Use Strong Passwords
Create unique passwords for each account. Use a password manager to keep track.
✅ Enable Two-Factor Authentication
Add an extra layer of security to your TRC account and other important accounts.
✅ Keep Software Updated
Update your operating system, browser, and antivirus software regularly.
✅ Think Before You Click
Take a moment to evaluate emails before clicking links or opening attachments.
✅ Use Secure Networks
Avoid entering sensitive information on public Wi-Fi. Use the campus network or VPN.
✅ Stay Informed
Keep up with security alerts from TRC Technology & Computer Services.
🧠 Test Your Knowledge
Q: An email from “president@3riverscollege.com” asks you to verify your student ID. What should you do?
Click to see answer
❌ Do not respond! This is likely phishing. The official domain is @trcc.edu, not @3riverscollege.com. Report it to IT Security and delete it.
Q: You receive an email about winning a scholarship you never applied for. It asks for your bank information. Is this legitimate?
Click to see answer
❌ No, this is a scam! Legitimate scholarships go through official channels and never ask for bank information via email. Report this to Financial Aid and IT Security.
Q: What’s the first thing you should do if you clicked a link in a phishing email?
Click to see answer
✅ Change your passwords immediately, starting with your TRC account. Then contact the Welcome Center at 573-840-9605 right away.
