Phishing scam: "Access Error"


Published: 24Apr2018

There is currently a phishing scam targeting the McGill community with the email subject "[Email Portal] Accesss Error". The email contains a link to a fake account reset page readers are asked to follow. The sender appears as McGill University but has an email address that is external. View an example of the message below.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

This email is a fraudulent attempt to gain access to your personal information. If you have already clicked on the link in this email and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

If you have received a phishing email or suspect that you have, please itsupport [at] (contact the IT Service Desk) immediately to report the phishing attempt.

Quick links:

Example of this phishing message:

Sender name & address: McGill University <external email address>
Subject: [Email Portal] Accesss Error

Dear Staff/Student:

If you receive this message, it means that your account has been queued for deactivation; this is due to an ongoing script error (code: 505) results received from your account.

To solve this problem, you must reset your account. In order to reset your account, please follow the link below to reset your account in accordance with the following versions. 
Account Reset  [fraudulent link]
Note: If this process is not completed within 24 hours will be resolved to suspend your account. We apologize for the inconvenience. 

Sincerely, IT Dept
McGill University
Hotline: 0800-080-402