Skip to main content
Sign In

IT Services, Information Technology Services



How to determine if an email message is a phishing attack

General things to look for:

  • A URL that isn't consistent with the message. Example a message that is supposed to be from the Help Desk, but contains a non-UCDenver URL. Note that you can always hover your mouse over a web link to "see" where the link will take you​
  • Spelling errors and bad grammar
  • Odd formatting (e.g. incorrect use of capital letters or punctuation)
  • A return or reply-to email address that is not from
  • If a password is being requested, the email is not legitimate. IT Services will never request your password via email. Look at what else is being requested as well (e.g., requesting your sex and country or territory should be a tip off that this would never come from the university)
  • No mention of a local phone number to call or person to contact. You can always call the IT Services Help Desk with your questions: 303-724-HELP (4357)
  • Deleting an account due to lack of response: IT Services does not require a response to activate or deactivate email or user accounts.

General advice for email usage:

  • Never click any link in an email unless it is from a trusted source.
    • If a link looks questionable, do not click on it!

      Never click a link in an email sent from someone you do not know!

  • Never divulge any personal information over email
      • Do not respond back to email messages with usernames/passwords, credit card information or HIPAA data.

  • Look critically at your email, if the message looks to be malicious, it probably is.
  • Be critical of divulging any information that is solicited in email messages.
  • Remember that the university will never ask users for a username/password. Furthermore, we will never ask you to visit a website to validate your account.

    © The Regents of the University of Colorado, a body corporate. All rights reserved.

    Accredited by the Higher Learning Commission. All trademarks are registered property of the University. Used by permission only.