Just a reminder that you should never respond to email requests for personal information, no matter how legitimate the message looks.

Boston University will never contact you to ask for your password. If you ever see a request for your password, even if the message looks like it came from a BU source or other organization you trust, just delete the email message; it is not legitimate.

Email requests for personal information are “phishing” to see if you will provide it. If you do reply to one of these messages and provide your password, you have given the sender access to sensitive information about yourself and enabled them to use your account for a variety of illicit purposes.

For more detailed information on spoofed messages and phishing schemes, please see www-staging.bu.edu/tech/comm/email/unwanted-email/help/.

For tips on how to tell if a message is phishing, see www.bu.edu/infosec/howtos/fight-phishing/.