Email Viruses, Spam and Phishing

How do I report a phishing attempt?

If you receive an email that you are unsure of, do not click any links or respond to the email. Instead, forward the email to for analysis.

IT Services will never ask you for your password, nor will the University ever send you email requesting your password information.

Which types of email attachments are blocked?

For security reasons, some file types and compressed file formats may not be sent through Stanford email. For example, an executable file sent in a compressed format will be scanned and most likely rejected.

I bit on a phishing attempt and revealed my Social Security Number. What should I do?

If you've sent your SSN by email or entered it onto a website that you have reason to doubt is legitimate, the Social Security System has a document that offers advice:

Why are emails like this able to be sent through Stanford's webmail?