Phish Bowl

A collection of scam emails and other suspicious communications.
rss feed

Legitimate Email

From: University Health Plans <sgrabowski @univhealthplans.com>
Date: Fri, Dec 16, 2016 at 1:23 PM
Subject: Brown University Insurance Waiver Audit
To:  [ Brown address ]

Posted: 12/16 1:59pm
Phishing Email (on campus)

Beware this classic scam (and example of "social engineering"): a sender contacts you with a request for assistance, usually money, when stranded in a foreign country due to a robbery. 

Posted: 12/14 10:58am
Phishing Email (on campus)

From: USA Computer Store <order @usacomputerstore.com>
Date: Wed, Dec 14, 2016 at 10:22 AM
Subject: invoice #00168
To: [ Brown address ]

Please pay this already:

Posted: 12/14 10:34am
Phishing Email (on campus)

From: Nykia Leach <leach_nykia @wheatoncollege.edu>
To: <ithelp @brown.edu>
Subject: Invitation to Access [DOCX.11] 12.14.2016
Date: Wed, 14th Dec 2016 9:12am

Posted: 12/14 9:37am
Phishing Email (on campus)

From: Help-Desk <wakasoninvestment221 @gmail.com>
Date: Tue, Dec 13, 2016 at 2:34 PM
Subject: ITS Service Desk
To: 

Posted: 12/13 3:33pm
Phishing Email (on campus)

Phishing can arrive by phone as well as email. A current phone scam to be aware of is one supposedly from an agency claiming to be the IRS and calling about a law suit against the intended victim.

Posted: 12/7 11:33am
Phishing Email (on campus)

From: emma emma <worldwarpeople @gmail.com>
Date: Fri, Dec 2, 2016 at 11:29 AM
Subject: SCHOLARSHIP STUDENT
To:

Posted: 12/2 11:43am
Phishing Email (on campus)

From: Robert Samuels <rsamuels @uri.edu>
Date: Wed, Nov 30, 2016 at 12:45 PM
Subject: Re: Document
To:

Please see attached document for your review.

Posted: 11/30 2:15pm
Phishing Email (on campus)

From: Renata Luongo <rluongo @rihs.org>
Date: Tue, Nov 29, 2016 at 9:44 AM
Subject: ACTION REQUIRED : Invitation to view shared document 11/29/30 #16728762
To:

Good Morning,

Posted: 11/29 10:40am
Phishing Email (on campus)

Subject:  Notice From Web
Date: Mon, 28 Nov 2016 21:58:58
From:  Lynne Teplin <LYNNET @lagcc.cuny.edu>
Reply-To:  alfordjohn0333 @gmail.com

Posted: 11/28 6:54pm
Phishing Email (on campus)

From: IRS.gov <theodore_bogosian @brown.edu>
Date: Mon, Nov 28, 2016 at 1:33 PM
Subject: IDENTITY AUTHENTICATION.
To:

Posted: 11/28 1:35pm
Phishing Email (on campus)

From: "IRS.gov" <nathan_buchwald @brown.edu>
Subject: 2016/2017 TAX RETURNS
Date: November 28, 2016 at 11:24:39 AM EST
To: undisclosed-recipients:;
Reply-To: no_reply @info.org

Posted: 11/28 11:27am
Updated: 11/28 12:10pm
Phishing Email (on campus)

From: Dr. Stephon Alexander <stephon_alexander @brown.edu>
Date: Fri, Nov 25, 2016 at 1:18 PM
Subject: RE: Urgent Request
To: [ Brown email address ]

Hello [ Names ],

Posted: 11/28 11:15am
Phishing Email (on campus)

From: Webmaster@brown.edu [ from aa993 @njit.edu, scarlett_bergam @brown.edu, and rebecca_berube @brown.edu ]
Date: Sun, Nov 27, 2016 at 18:24

Posted: 11/27 8:13pm
Phishing Email (on campus)

From: Ferreira, Paula <paula_ferreira @brown.edu>
Date: Wed, Nov 23, 2016 at 12:41 PM
Subject: ESSENTIAL DOCX - KINDLY GO THROUGH : 11/23/16 brown[pdf]
To:

Posted: 11/23 2:42pm
Phishing Email (on campus)

From: Alexis Atwell <alexis_atwell @brown.edu>
Date: Fri, Nov 18, 2016 at 6:57 PM
​​Subject: 
To: 

Posted: 11/18 7:14pm
Phishing Email (on campus)

Beware of printer scams that typically begin with someone identifying themselves as being an individual on campus requesting printer model numbers or offering toner for printers or copiers.

Posted: 11/17 11:24am
Phishing Email (on campus)

We've had a report of a phishing scheme that arrives via both email and the telephone, requesting that you complete a timesheet for the company Aerotek.

Posted: 11/15 3:37pm
Phishing Email (on campus)

From: Amazon, Inc. Shipping <support1427 @amazonwisconsin.org>
Date: Tue, Nov 8, 2016 at 8:45 AM
Subject: Re: Amazon Inc. Order Details for Xxxx Xxxxx, [Department/Program] - Brown University

Posted: 11/8 11:57am
Phishing Email (on campus)

From: Mail Administrators. <rkward @telus.net>
Date: Tue, Nov 8, 2016 at 9:35 AM
Subject: Email Validation!
To: 

Hello

Posted: 11/8 11:17am
Phishing Email (on campus)

From: Bates, Kaye M <bates_k @aps.edu>
Date: Sat, Nov 5, 2016 at 2:09 PM
Subject: payment slip
To:

Posted: 11/7 8:51am
Phishing Email (on campus)

From: Employment <dkyllo @comcast.net> [ sent from different Comcast addresses ]
Date: Mon, Oct 31, 2016 at 12:04 PM
Subject: Part-time Assistant Needed !
To: [ various Brown addresses ]

Posted: 10/31 3:59pm
Phishing Email (on campus)

From: InformationTechnologyUpdate @edu <blennon785 @hcc.edu>
Date: Fri, Oct 28, 2016 at 3:17 AM
Subject: IT help-desk - VALIDATE
To:

Posted: 10/28 9:39am
Phishing Email (on campus)

​From: Jin Ping Chi <drazizehab @gmail.com>
Date: Sun, Oct 16, 2016 at 9:26 PM
Subject: NOT SPAM: Our Reserved Clients needs good Business Relationship. See PDF
To:

Posted: 10/17 9:37am
Phishing Email (on campus)

From: Brown Unversity Info;Barbara D <harrispowell23 @gmail.com>
Date: Fri, Oct 14, 2016 at 1:39 PM
Subject: Important Info;salary increase/Staff
To:

Dear Staff,

Posted: 10/14 3:33pm
Phishing Email (on campus)

Steer clear of pop-up surveys, like the "Brown University Survey" pictured below, which may appear after visiting various sites.

Posted: 10/14 12:08pm
Updated: 8/24/17 2:05pm
Phishing Email (on campus)

Faculty members who are treasurers for professional societies are being targeted with a variation on the wire transfer scam that periodically surfaces at Brown.

Posted: 9/29 1:54pm
Phishing Email (on campus)

Be on alert for a suspicious FedEx mailing, which is phishing and has an attached zipfile containing ransonware.

Posted: 9/27 12:29pm
Phishing Email (on campus)

From: Emily Coker <emily.coker25 @uga.edu>
Date: Mon, Sep 26, 2016 at 1:48 PM
Subject: VERIFY
To:  [ lengthy list of @brown.edu addresses ]

Posted: 9/26 2:01pm
Phishing Email (on campus)

Another "wire transfer hoax" email has been reported, similar to others reported every couple of months (cyber criminals "spoof" well-know email addresses to try and trick recipients).  Like those emails (see

Posted: 9/23 11:43am

Pages