Phishing scam with multiple subjects and senders: "Validate Your McGill Account" & "Important Alert"

News

There are multiple phishing emails circulating from different senders asking users to click on a link to validate their email account. The link redirects to a fake login page. The email subjects are "Validate your McGill Account" and "Important Alert from McGill University Admin".

See an example of the phishing message below.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

This email is a fraudulent attempt to gain access to your personal information. If you have already clicked on the link in this email and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

If you have received a phishing email or suspect that you have, please itsupport [at] mcgill.ca (contact the IT Service Desk) immediately to report the phishing attempt.

Quick links:


Example of this phishing message:

Sender's address: <fraudulent email address>
Subject: Validate Your McGill Account

This is to notify all Students, Staffs/Faculty, of McGill University that we are validating all McGill network user accounts.

Kindly confirm that your account is still in use by clicking the validation link below:

Validate Email Account <fraudulent link>

Thank You,

IT Service Desk
Office of Information Technology