IT staff or any University or hospital employee will never ask for your password or DUO code. If someone does, stop all communication immediately and contact the Help Desk.
If you believe your account has been compromised, reset your HawkID password right away and notify the Help Desk.

ITS Help Desk
Phone: 319-384-4357
Email: its-helpdesk@uiowa.edu

HCIS Help Desk
Phone: 319-356-0001
Email: helpdesk-hcis@uiowa.edu

 

Below you'll find some examples of current phishing emails seen on campus. The most recent examples are listed at the top of the list. 

SMS Phishing Examples has examples of current smishing (SMS phishing) attempts on campus

If you get a suspicious email but don't see it listed here, Do NOT assume it is safe. There are many variants of every phish, and new ones are sent each day. When in doubt, consult with your IT support staff or the ITS Help Desk.

Report suspected phish messages to the UI Phishing team using these reporting instructions. However, if you see a particular message you received on this page, there is no need to report it as we are already aware of it.  

Still aren't sure if your email is phishing or not? Here are some tips to recognize phishing scams. 

NOTES:

  • Never Download images in Phish messages.
  • Never Click links in suspected phish messages. Hold (Hover) your mouse over the link to preview where it goes but do NOT click.
  • Carefully check the FROM address to make sure it is coming from the person you think
  • Never reply to a phish message.

 

[External] The following licenses has expired
phishing message license expired microsoft

 

Various subjects about Payroll Document Review

The sender varies as well as the subject.  Some examples:

Subject: [External] Action Required: Review and Acknowledge Payroll Document

Subject: [External] Important Payroll Document – Review Required

Subject: [External] Payroll Document Ready for Your Review

Do NOT Open Attachment.

Image of phish message with text starting with "External Payroll Document Ready for Your Review"

 

 

[External] Need your feedback [Name]

 

Need your Feedback [name]

[External] New Hiring

New Hiring

ACT NOW
screenshot of Act Now phishing email message

[External] Assigned Tasks Review and Progress Notes
image of phish message from noreply@mail.tenzro.com and HR

[External] Welding Machine Tools
Welder

TERMINATE OFFICE 365 ACCOUNT
phishing message terminate office 365 account threat

[External] PART - TIME JOB Opportunity - OR - [External] Student PA Job Availability Notice
phishing message advertising part time job opportunity

 

[External]

 

Phish Text Exchange

 

 

 

[External] Proposal InquIry
Phish-Proposal-Inquiry

[External] Invitation to Participate – Johnson County Public Health Request for Quotation (RFQ)
2026-07-08_Phish-Johnson-County

[External] Work and Earn Position - Earn as a University of Iowa student
phishing message inviting users to a part time job with suspicious attachment

[External] Special Recognition for Faculty and Staff
Special Recognition for Faculty and Staff

[External] First Name Last Name

This message will change the subject to each individual's name and will also insert their home address. 

Phishing Message includes student loan forgiveness and home address

Work-Study Opportunity - Personal Assistant Position Available
phishing email work study part time opportunity

Administrative Assistant (Work-Study) Opportunity
phishing message admininstrative assistant work study opportunity

Important Notice
Phishing Email Example

[External] STUDENT JOB ALERT - APPLY NOW. - OR - [External] URGENT HIRING NOTICE.
student job alert phishing message with attachment

[External] Job Placement & Student Services or [External] Urgent: Student Assistants Needed. or [External] Don’t Miss This Student Job Opportunity. or [External] PART‑TIME STUDENT POSITIONS AVAILABLE. or [External] REMOTE WORK FOR STUDENTS.
phishing message with no text just attachment of word document

{External] Invitation to Join UI Work-Study Program
phishing email work-study program virtual position part time
Last updated
Article number
5356