Phishing scam: Mcgill Authentication For [name] Expires on [date]

Message containing fraudulent QR code
Published: 12 September 2023

A phishing email is targeting the McGill community with the subject "Mcgill Authentication For [name] Expires on [date]".  See an example of the message above. The message contains a QR code and asks you to scan it with your phone camera: 

"Message date: [date]

Promptly scan below QR code with your phone camera to release HELD messages 

[fraudulent QR code]

Some messages failed to load and could'nt be delivered."


Please DO NOT scan the image, click on any links, or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

This email is a fraudulent attempt to gain access to your personal information. If you have already scanned the image and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

You can quickly report a suspicious email by using the Report Message, Report Junk, or Report Phishing buttons in any Outlook app, including Outlook on the web (

Note: If the email is already in your Junk Email folder, you do not need to report it.

For more details, see Report suspicious emails.

Quick links:

Back to top