Phishing scam: "You have a message" from Human Resources


A phishing scam is targeting the McGill community, with the subject "You have a message". The example we received says, "You have a message from the Human Resources Department" and asks the recipient to click a link to view the message. There may be other variants of this message, seeming to come from different units within McGill, or with different signatures. Please be on the lookout for similar emails.

Click the screenshot at the left to view a sample of the email.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

This email is a fraudulent attempt to gain access to your personal information. If you have already clicked on the link in this email and submitted any personal information, you should change your McGill Password as soon as possible. See the McGill Password Reset Checklist for instructions.

If you have received a phishing email or suspect that you have, please report it, by sending the message as an attachment to phishing [at] immediately.

Quick links:

Example of this phishing message:

Sender name & address: <valid McGill person>
Subject: You have a message


You have a message from the Human Resources Department.

Click here [fraudulent link] to view your message.

Copyright 2017 McGill University Health Centre | All rights reserved.


[Signature impersonates actual McGill person]