Stay alert: Phishing attempts

As the fall 2026 semester begins, Auburn University's Office of Information Technology asks every member of our community — students, faculty and staff — to keep cybersecurity front of mind.

The start of each academic term brings a predictable increase in phishing attempts. The reason is straightforward: inboxes fill quickly with legitimate messages about classes, financial aid, payroll, campus services and technology. Malicious messages are engineered to blend in. The volume creates cover and a moment of distraction is all it takes.

Pause Before You Click

When an unexpected message arrives, ask yourself:

• Was I expecting this?
• Is it creating a sense of urgency, curiosity or concern?
• Is it asking me to click a link, open an attachment, scan a QR code, share credentials, approve a login or send money?
• If the answer to any of these is yes, stop. Verify the request through a known, trusted channel before taking action.

What to Watch For

Phishing attempts have grown more convincing. They use familiar logos, institutional language, and multiple channels — email, text message, and phone calls — to reach their targets. No format is inherently safe. Be skeptical of any message that creates pressure to act quickly or asks for account credentials, approvals or financial transactions, regardless of how professional it appears.

When in Doubt, Report It

Use the Report Phishing button in Outlook, or forward suspicious messages to infosec@auburn.edu. Our team investigates every report. A false alarm is far preferable to a missed threat, and we would always rather hear from you.

Additional resources — including examples of recent phishing messages and guidance on identifying and reporting suspicious communications — are available at the Auburn Cybersecurity website: https://aub.ie/cybersecurity.

Thank you for staying alert. The security of Auburn's systems and the people who depend on them is a shared responsibility.