If you receive an email that you are unsure of, do not click any links or respond to the email. Instead, forward the email to firstname.lastname@example.org for analysis.
IT Services will never ask you for your password, nor will the University ever send you email requesting your password information.
For security reasons, some file types and compressed file formats may not be sent through Stanford email. For example, an executable file sent in a compressed format will be scanned and most likely rejected.
If you've sent your SSN by email or entered it onto a website that you have reason to doubt is legitimate, the Social Security System has a document that offers advice:
Why are emails like this able to be sent through Stanford's webmail?