Frequently Asked Question

Phishing is when someone sends a fake email pretending to be a real person or company to trick you into giving up your password, clicking a dangerous link, or sending money or personal information. Nursing students are common targets, especially with fake "job offer" and "account problem" messages. This guide helps you spot phishing and shows you how to report it.

Warning signs of a phishing email:

1. A sense of urgency or fear - "Your account will be closed in 24 hours", "Act now", or "Final warning".
2. A request for your password, payment, gift cards, or personal information. Jersey College and Microsoft will never ask for your password by email.
3. A sender address that looks slightly off - misspelled names, odd extra letters, or a public address (like @gmail.com) claiming to be from Jersey College or a professor.
4. Links that don't match - hover your mouse over a link (without clicking) and check whether the web address looks like the real site. On a phone, press and hold the link to preview it.
5. Unexpected attachments, especially files you didn't ask for.
6. Spelling and grammar mistakes, or a greeting like "Dear User" instead of your name.
7. "Job offers" or "work-from-home" messages that arrived out of nowhere and ask you to deposit a check or buy gift cards. These are scams.

What to do if you're not sure:

1. Stop. Don't click any links, don't open attachments, and don't reply.
2. Don't enter your password into any page the email sent you to.
3. If an email claims to be from Jersey College, the Help Desk, or a professor, contact them through a phone number or address you already trust - not the contact info in the suspicious message.

How to report a suspicious email

1. Do not click anything in the message first.
2. Forward the suspicious email to the Jersey College Help Desk at itsupport@jerseycollege.edu.
3. When possible, forward it "as an attachment" so we can see the full details. In Outlook on the web (https://outlook.office.com): open the message, click the three dots (More actions) at the top of the message, choose "Forward as attachment", and send it to itsupport@jerseycollege.edu. If you don't see that option, a regular forward is fine.
4. In the body, add a quick note such as "I think this is phishing - please check."
5. After reporting, delete the message from your inbox.

If you already clicked a link or entered your password:

1. Change your Jersey College password right away (see the "I forgot my password - how do I reset it myself?" article). Remember, this password also protects Canvas and Microsoft 365.
2. Contact the Help Desk immediately so they can help secure your account.
3. If you entered banking or payment information, contact your bank as well.

Important tips:

• When in doubt, ask. It's always okay to check with the Help Desk before clicking.
• Jersey College staff and Microsoft will never ask for your password or MFA codes by email, text, or phone.
• Reporting phishing helps protect your classmates too - thank you for doing it.

If you're still having trouble, contact the Jersey College Help Desk at 201-645-1164 or itsupport@jerseycollege.edu.