Skip to content

Phish Bowl

The Phish Bowl features examples of phishing emails received by members of the University of Toronto (U of T) community to help you identify and report suspicious emails.

If you have received any of the phishing emails below or other suspicious emails, please report it to report.phishing@utoronto.ca and delete it immediately from your mailbox. Don’t click any links, download attachments or engage with the sender. Please do not forward or share the email with your colleagues and other contacts.

Learn more about what to do if you suspect a phishing attempt.

[Phish] HELLO
October 22, 2018
Details: From: [redacted] Subject: HELLO Text: [Redacted] Are you free at the moment? — Best Regards, [redacted] sent from my IPhone

[Phish] Re: Hello
October 22, 2018
Details: From: [redacted] Subject: Re: Hello Text Hello [redacted] I’m in a meeting right now and that’s why i’m contacting you through here. I should have call you, but phone is not allowed to be use during the meeting.I don’t know when the meeting will be rounding up, And i want you to help me ...

[Phish] Payroll schedule is available
September 19, 2018
Details: From: UToronto <255500J@curtin.edu.au> Subject: Payroll schedule is available Text: 1 New Notification Regarding Your 2018 Payroll https://www.utoronto.ca/payr0ll/2018/ Copyright © 2018 University of Toronto

[Phish] Swift response
September 18, 2018
Details: From: [Redacted]<greysm211@gmail.com> Subject: Swift Response Text: [Redacted], How are you doing? There is something I need you to help me with, let me know if you are available so I can give you the details. Regards [Redacted]

[Phish] Suspicious login noticed
August 24, 2018
Details: From: Royal Bank Of Canada <no-reply@rbcroyalbank.com> Subject: Suspicious Login Noticed. Text: We detected something suspicious about a recent login to your online account. For your security, we locked your account and stoped all pending transactions until we are able to verify your recent account activities. To unlock your account,we request you LOGIN NOW and ...

[Phish] Urgent server upgrade
August 9, 2018
Details: From: University of Toronto Web Admin <help.desk@utoronto.ca> Subject: Urgent Server Upgrade Text: Due to our recent server upgrade, all registered faculty/staff and students of webmail service are to update with their webmail account information immediately. Some of these problems will be solved: Problem when logging in via the Central Authentication Server (CAS). Frequent login errors and delayed e-mail delivery. ...

[Phish] Senior official spear-phish
August 8, 2018
Details: From: [redacted] Subject: [redacted] Text: Are you free right now? I’ll need you to run a task ASAP. P.S: I’m busy at the moment and can’t talk but will lookout for your reply. Thanks I need you to get some gift cards, which are to be sent out in about 45mins. How soon can you arrange ...

[Phish] Parking ticket reminder 39345008
August 1, 2018
Details: From: Parking Ticket <billing@christiancinque.com> Subject: Parking Ticket Reminder 39345008 Text: Parking violation notice The City of Toronto records indicate that a parking tickets issued to the vehicle described below has not been paid. this fines and applicable penalty charges area past due and must be paid within the next 14 calendar days. Driving Records show that ...

[Phish] Exploitation attempt
July 19, 2018
Details: From: Franchot Bickel <nfkoraziogn@outlook.com> Subject: [redacted]odine[redacted] Text: I do know lodin[redacted] your passphrase. Lets get directly to the purpose. You may not know me and you are most likely thinking why you’re getting this mail? Absolutely no one has paid me to check about you. In fact, I setup a software on the X video clips ...

[Phish] Problem with your Netflix membership
June 19, 2018
Details: From: Netflíx <service@lnetflowx.com> Subject: Problem with your Netflíx membership Text: Please Update Your Payment Method Dear Customer, Sorry for the interruption, but we are having touble authorizing your credit card. Please click here to enter your payment information again or to use a different Payment method. When you have finished, we will try to verify ...