Phishing scam: "Subject: Library Question - New Account"


There is a phishing email circulating to users about access to their library account expiring due to inactivity. The email asks users to click on a fraudulent link to continue to have access to the library service. See an example of this phishing message below.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

This email is a fraudulent attempt to gain access to your personal information. If you have already clicked on the link in this email and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

If you have received a phishing email or suspect that you have, please itsupport [at] mcgill [dot] ca (contact the IT Service Desk) immediately to report the phishing attempt.

Quick links:

Example of this phishing message:

Sender's address: On behalf of <fraudulent email address>
Subject: Library Question - New Account [Question ####]

Dear User,

Your access to your library account is expiring soon due to inactivity. To continue to have access to the library services, you must reactivate your account.

For this purpose, click the web address below or copy and paste it into your web browser. A successful login will activate your account and you will be redirected to your library profile.

<fraudulent LINK>

If you are not able to login, please contact <fraudulent LINK> for immediate assistance.



McGill Library
McLennan Library Building
3459 rue McTavish
Montreal, Quebec
H3A 0C9