RIT Phish Bowl | Security

Report a Phish

If you receive a suspicious email, and it is not already posted here,

please report it using the built-in reporting tools in Outlook or Gmail.

For detailed instructions on when to unsubscribe, report spam, or report phishing, and how to verify senders and links, see KB0045448: When and How to Unsubscribe, Report Spam, or Report Phishing and How to Spot Spoofing & Bad Links.

Screenshot of a phishing email impersonating an official communication from Rochester Institute of Technology (RIT), annotated with orange arrows pointing out red flags. The top arrow points to the email header and CC line, labeled "Compromised RIT account." The second arrow points to improper capitalization in the phrase "The Office of the president," labeled "lowercase." The email body contains an icon, text requesting a signature on a "Faculty Appointment & Service Agreement," and a prominent blue button

Faculty Appointment & Service Agreement phish

Academic agreement allegedly from RIT President

Screenshot of a phishing email claiming to be a Title IX case questionnaire from the Rochester Institute of Technology (RIT), annotated with orange callout boxes pointing out red flags.

Action Required: Title IX Case Reference

Fraudulent Title IX Case Reference email about alleged sexual misconduct. The phish is targeting RIT faculty and staff.

AUTH NOTICE!!!

Received July 8, 2026

Email with QR code for Two-Factor Authentication update.

Screenshot of phish--final official notice

RIT Notice: School Email and Financial Aid Account Re-Activation

Note that the subject line may vary.

Student Incident Report FollowUp phish

Reported 6/2/2026

Shared MSWord document with malicious links

Message concerning your Student ID

Phish with malicious link, reported 5/28/2026

Signature Required-Approval Pending Request Phish

Shared document phish with signature request. Sender and recipient address are the same.

Screenshot of email asking the recipient to purchase iTunes gift cards

Brief Update

iTunes gift card purchase request. This is an example of a Business Email Compromise attack. It uses an RIT name, but is sent from an external email account.

Evites with malicious executables

We're seeing a number of emails originating external to RIT that appear to be Evites sent to the recipient. When you click on Open invitation, you're prompted to download an executable that will compromise your account.

Notification about your ID

Sent from a compromised alumni account

Email text of Airstream Trailer Gift Scam

Resumption Day Is Here! Enjoy a Gift

Airstream Trailer Gift Scam. Received 1/28/2026

Screenshot of phishing email related to Bonus and Allocation

January Bonus and Allocation for All Staff

Word attachment FIRSTNAME_Payroll.doc. Seen on 1/9/2026.

Screenshot of phishing email related to card use

Phishing attempt related to card use.

Image of phishing email offering free camera

Free Fujifilm X-H2S Camera (No Cost Pickup Only)

Phishing email offering a "free" item. See our article at https://www.rit.edu/security/marketplace-sales-scams for another example

Update Concerning Your Student Account

Phishing email using a TinyURL to hide where the link takes you.

Restriction on your Rochester Institute

Received across RIT on 11/7/2025. Phish with malicious link.

Job Title: Remote Student Assistant, Digital Content & Analytics

This job scam was posted on 11/6. It looks very legit and used elements from typical RIT student job postings.However, the email was sent from another university and requests that applicants apply by text. RIT student jobs are listed on Career Connect. There are a few other tells. Can you find them?

Notice on your RIT

Phish received Thursday, 10/31. Multiple indicators that it's not from RIT, including the red banner stating that it DID NOT come from RIT.

Offered Part-Time Position: Needed a Remote Personal Assistant

Job Scam Email, received at both personal and RIT email addresses. The link in the original leads to a Google Form.

From: OFFCAMPUS EMAIL ADDRESS
Date: Tue, 7 Jan 2025 at 12:01
Subject: Fw: Offered Part-Time Position: Needed a Remote Personal Assistant
To: PERSONAL or RIT Email account

Remote job scams, various titles

A job scam email was received beginning Sept. 21. Titles include

Application-Administrative Assistant Remote Job
Application Administrative Assistant Remote Job
Remote Work Position for Student
Remote Job Information
Re; Administrative Assistant Remote Job

Content was similar to the screenshot.

For more information about staying safe online, visit Prevent Phishing