If something feels off, stop and report it. You can always ask the IT Helpdesk to take a look.
How to Spot a Phishing Scam
Watch for these common warning signs:
- An unexpected message that creates urgency, fear, or pressure.
- A request for your password, personal information, banking details, or MFA code.
- A sender address that looks unusual, misspelled, or unrelated to the message.
- A link that does not match the website you expected to visit.
- A message offering easy money, a job, a refund, a prize, or a “limited-time” opportunity.
- An attachment you were not expecting.
- Unexpected login prompts or MFA approvals you did not start.
Messages from non-FLCC accounts display the following alert:
"CAUTION: This message originated outside the FLCC email system. Do not click links or open attachments unless you recognize the sender and know the content is safe."
Before you sign in anywhere, slow down and check the address carefully. If you need to visit a site, type the known website address yourself or use a bookmark you already trust.
Common Scams That Target College Communities
Scammers often target students, faculty, and staff with messages that appear to come from a college office, instructor, supervisor, classmate, vendor, or trusted service. Scams may use college branding, a familiar name, or a realistic message thread. Be on the lookout for these common phishing tactics. View warning signs.
Financial Aid, Billing, or Refund Scams
Subject: Action Required: Student Refund Pending
Our records show that you are eligible for a tuition refund. To receive your payment, confirm your student ID, direct deposit information, and mailing address by the end of the day.
Unexpected refund, request for banking details, deadline pressure, financial aid or billing language.
Login and MFA Scams
Subject: Microsoft 365 Sign-In Verification Required
A new security update requires all FLCC users to confirm their Microsoft 365 login. Sign in using the link below and approve the verification request on your phone to avoid losing access.
Fake login prompt, unexpected MFA request, threat of lost access, link instead of directing users to the official FLCC or Microsoft sign-in page.
Account Problems
Subject: Urgent: Your FLCC Email Account Will Be Suspended
Your student email account has exceeded its storage limit and will be deactivated today unless you verify your account. Click the secure verification link below to keep your email active.
Urgent threat, account shutdown warning, suspicious verification link, pressure to act immediately.
Fake Job or Research Offers
Subject: Student Research Assistant Position — $350 Weekly
Hello student, your college profile was recommended for a remote research assistant position. The work only takes a few hours each week, and payment will be sent in advance after you confirm your personal email, phone number, and banking details.
Unsolicited job offer, easy money, vague sender, request for personal or banking information.
Gift Card or Purchase Requests
Subject: Quick Favor Needed
I am in a meeting and need you to purchase several gift cards for an urgent department request. Reply as soon as possible, and I will send the amounts and instructions.
Unusual request from a supervisor or colleague, secrecy, urgency, gift card purchase.
How to Report Suspicious Messages
Email in Outlook
- Use the Report Phishing option in Outlook. This will automatically delete the message from your inbox.
- If the reporting option doesn't work, forward the message as an attachment to helpdesk@flcc.edu.
Text Messages
While IT does not control text messages, alerting our team to suspicious activity can help us inform the community about recent phishing attempts.
- Take a screenshot of the message.
- Email the screenshot to helpdesk@flcc.edu.
- Include the phone number, date, and whether you clicked anything.
If you're not sure whether it's a phishing scam, send it to the IT Helpdesk anyway. It is better to ask than to guess.
What to Do If You Clicked or Responded
If you clicked a suspicious link, opened an unexpected attachment, entered your password, replied to a scammer, or approved an MFA prompt you did not start, act quickly.
- Reset your FLCC password using Account Activation and Recovery.
- Review your MFA methods and remove anything you do not recognize.
- Contact the IT Helpdesk at helpdesk@flcc.edu.
- If you sent money or shared banking information, contact your bank or payment provider.
- If there is an urgent safety concern, contact Campus Police or call 911
Taking the appropriate steps quickly helps reduce the impact of a compromised account.
Internet Security Awareness Training
Want to build confidence in your phishing spotting skills? Complete the KnowBe4 Home Internet Security Awareness Course. This free, comprehensive training program will teach you how to spot social engineering red flags, protect your personal data, and secure your mobile devices against modern threats.
Course password: homecourse
Helpdesk & Computer Lab Hours
Spring/Fall Semesters
Mon - Thur: 7:30 a.m. - 7:30 p.m.
Fri: 7:30 a.m. - 4:00 p.m.
Sat: 9:00 a.m. - 1:00 p.m.
Sun: Closed
Winter/Summer Sessions
Mon-Fri: 8:00 a.m. - 4:00 p.m.
Sat: Closed
Sun: Closed