Tips for Preventing Phishing

Do you have a suspicious email message that isn't listed in the phish tank? It may still be a phish!

We encourage you to report it to us.

Please also take the following precautions:

  • View strange emails with caution, even if they appear to come from a person you trust.
  • Hover over any links before clicking in order to view the link destination.
  • Use a search engine to search for phrases in the email. If others have reported it as a phishing message, it will likely appear on the internet.

For more information on how to spot a phishing email, please see the related knowledge-base article.

If you believe you're a victim of a phishing attack targeting your UO Duck ID or email account, immediately change your password and security questions by visiting the Duck ID Self-Service and contact the Information Security Office (ISO) at