Phishing

copied! support.bigelow.org/phishing

Updated

Report Phishing

Unsure if it's phishing?
Forward it to helpdesk@bigelow.org or submit a helpdesk request
Email Phishing
  1. Open Gmail
  2. Open the email that you want to report as phishing
  3. Next to reply , click the vertical ellipse  
  4. Click Report Phishing
Calendar Phishing
  1. Open Google Calendar
  2. Click on the phishing event
  3. Click the three vertical dots ⋮
  4. Click Report as spam
SMS Phishing
  1. Open the conversation with the spam message
  2. Tap the report option:
    iPhone: tap Report Junk below the message. (This link only appears for senders who aren't in your Contacts)
    Android (Google Messages): tap the three-dot menu at the top right and choose Block & report spam — or press and hold the conversation in your message list and tap Block
  3. Confirm:
    iPhone: tap Delete and Report Junk
    Android: make sure Report spam is checked, then tap OK

About Phishing

Recognizing Phishing

Most phishing tries to scare or rush you into clicking a link, giving up a password, or sending money. When in doubt, don't act — forward it to phishing@bigelow.org.

The "I hacked you" ransom email

A common scam email claims a hacker broke into your computer, recorded you through your webcam, and stole your password, then demands bitcoin to stay quiet. It often shows a real password of yours to seem convincing. It's a bluff — your computer wasn't hacked, no recording exists, and you should not pay or reply.

Why it looks like it came from your own address: sender addresses are trivial to fake ("spoofing"), so seeing your address on a message doesn't mean anyone got into your account. Because Bigelow email requires two-step verification, logging in takes both your password and your phone.

Why they know one of your passwords: it came from a data breach on some other website, not from Bigelow. If the password shown is one you still use anywhere, change it immediately — and never reuse a password across sites.

Strong passwords

Make every password unique and at least 16 characters. A password manager is the easiest way to do this; we recommend using 1Password. If you're setting one by hand, string together several unrelated random words.

Still need help? Submit a ticket.

How did we do?

Google Calendar Overview

Yubico Security Keys

Powered by HelpDocs (opens in a new tab)