Skip to main content
Indiana Wesleyan University Support Knowledge Base

How to Identify Email Scams


This page is intended to aid in the process of identifying various types of emails that may be an attempt at gathering personal information such as usernames and passwords. Such emails are referred to as a "phishing" email or scam. If you receive an email and are uncertain of how to proceed you may forward the email to the Support Center.

Key Indicators

If you answer yes to any of these questions it's possible the email may be a scam or phishing attempt.

  • Does the email ask for a username or password?
    • Any IT communications will NEVER ask for your password. Your password should NEVER be given to anyone for any purpose.
  • Does the email ask you to click on a link to verify information?
  • Is the email from an address you're unfamiliar with?
    • Note: Just because the email appears to be from a trusted source DOES NOT mean the email is safe. The "From" address can be faked, making a sender appear legitimate when they are not. Other Key Indicators should be used to determine if the email is legitimate in this case.
  • Does the email contain poor grammar?
    • Poor grammar can be a Key Indicator, but should not be the only indicator for determining if an email is or is not legitimate.
  • Does the email contain attachments that you were not expecting? It's best not to open them as some attachments can steal your credentials if you are already logged into your email account just by opening the attachment.
  • Does the email say you've received an encrypted message from someone you were not expecting?  Even if you were it's best to check with them to make sure it's legit.
  • Does the email claim to be from IWU but directs you to a website address that does not contain

View a List of Known Scams Received by IWU Recipients

Click here to view a running list of known email scams.

What To Do Next

If you receive an email from someone and are uncertain if it is a scam, a good first step in finding out is to contact the person listed as the sender via alternative means (phone, face to face etc.) to see if they did send the email out.

If you're unable to contact the person and after going through the Key Indicators above you're still uncertain it would be best to forward the email to the Support Center.

If you are able to determine an email is a scam, you may safely delete the email from your inbox.