Phish Bowl

A collection of scam emails and other suspicious communications.

rss feed

Phishing Email (in the wild)

The Internal Revenue Service (IRS) warns of various types of scams that may target taxpayers this summer, including robocalls, demands for immediate payment, and threats to have taxpayers arrested immediately.

Posted: 06/28/2017 - 9:12am
Phishing Email (on campus)

From: G+Security Team 2017 <colvinn>
Date: 2017-06-27 11:55 GMT-04:00
Subject: Avoid the closure of your mail account,

Posted: 06/27/2017 - 12:31pm
Phishing Email (on campus)

From: "Email Help" <newsletter>
Date: June 25, 2017 at 3:54:07 PM EDT
To < Brown address>
Subject: Activate Your Google Gsuite Account

Posted: 06/27/2017 - 9:11am
Phishing Email (on campus)

From: -noreply <jech7be> OR Mail Update2017 <branniba>
Date: 2017-06-23 12:01 GMT-04:00
Subject: Failure to update your account will lead to closure

Posted: 06/23/2017 - 12:14pm
Phishing Email (on campus)

From: Rougeau, Janis K <JROUGEAU>
Date: Thu, Jun 15, 2017 at 11:33 AM
Subject: Faulty\Staff
To: "Rougeau, Janis K" <JROUGEAU>

Posted: 06/15/2017 - 12:23pm
Phishing Email (on campus)

From: G+@-Notice <abbottet>
Date: 2017-06-09 13:35 GMT-04:00
Subject: Important update notice to prevent account closure

Posted: 06/09/2017 - 3:29pm
Phishing Email (on campus)

From: Library Services - Brown Library <libraryservices>
Date: Wed, Jun 7, 2017 at 6:03 PM
Subject: Library Account
To: [ Brown address ]

Dear Library Member,

Posted: 06/08/2017 - 10:13am
Phishing Email (on campus)

From: IT Department <itdepartment>
Date: Tue, May 23, 2017 at 4:58 PM
Subject: Change of Staff Mail
To:  Josiah_Carberry @

Posted: 05/31/2017 - 12:34pm
Phishing Email (on campus)

This scam email poses as an alert that someone else may have logged into your device when it's trying to gather personal information instead.

Posted: 05/24/2017 - 4:20pm
Phishing Email (on campus)

The digital signing service DocuSign reported that they'd been hacked by an unnamed third-party, who got access to email addresses of its users, which in turn were used to phish others.

Posted: 05/17/2017 - 2:30pm
Phishing Email (on campus)

From: Kane, Agnes <agnes_kane>
Date: Mon, May 15, 2017 at 1:14 PM
Subject: Documents

Posted: 05/15/2017 - 1:24pm
Phishing Email (on campus)

Beware email that looks like it is was sent by Brown's Alumni Assocation, but is actually from an "unofficial alumni network" organized through

Posted: 05/10/2017 - 10:11am
Phishing Email (on campus)

We have received a report of an email, supposedly sent by President Paxson, requesting that the recipient post transactions for the sender.

Posted: 05/08/2017 - 12:35pm
Phishing Email (on campus)

We are aware of a widespread scam of what appear to be Google Drive sharing notices. See the end of this posting for an example screenshot.

Posted: 05/03/2017 - 3:17pm
Phishing Email (on campus)

From: Ali Fardan <rasalinvestmentauthority>
To: <ithelp>
Subject: Purchase Order
Date: Tue, 2nd May 2017 2:17am


Posted: 05/02/2017 - 9:14am
Phishing Email (in the wild)

In this phishing scheme, scammers send emails impersonating LinkedIn, to try luring you to a fake website where you would download your CV.

Posted: 04/25/2017 - 2:15pm
Phishing Email (on campus)

From: Jane Kristin Helgesen <jane-kristin.helgesen>
Date: Mon, Apr 24, 2017 at 8:30 AM

Posted: 04/24/2017 - 7:43am
Phishing Email (on campus)

This phishing email attempts to lure you with the sender name of "Prudential Financial", and a file link that includes your name.

Posted: 04/19/2017 - 11:33am
Phishing Email (on campus)

From: Delta Air Lines <orders>
Date: Tue, Apr 18, 2017 at 10:20 AM
Subject: Your order 68052460 with Delta Air Lines has been confirmed!
To: (Brown address)

Posted: 04/18/2017 - 12:32pm
Phishing Email (on campus)

Beware of phone calls from individuals requesting printer serial or model numbers, often with the claim that they are checking or updating machines and need the number to process the request.

Posted: 04/10/2017 - 12:15pm
Phishing Email (on campus)

Various students have reported receiving an email from Campus Storage with offers for summer storage options. This company is not affiliated with Brown Student Agencies nor has it been vetted for legitimacy by them.

Posted: 04/06/2017 - 4:11pm
Legitimate Email

Today's mailing about the "Real Appeal" program to United Healthcare members is the "real deal" - details are available at

Posted: 04/04/2017 - 11:42am
Phishing Email (on campus)

Be on guard against a phone phishing scam reported to us that starts with a call from someone claiming to be from the local FBI office.

Posted: 03/29/2017 - 11:27pm
Legitimate Email

The following is a sample notification sent regarding ORCID, used at Brown and elsewhere to create identifiers for publication/research activities.

Posted: 03/28/2017 - 10:32am
Phishing Email (on campus)

From: Evelyn Maxwell <Evelyn.Maxwell>
Date: Mon, Mar 13, 2017 at 11:35 AM
Subject: RE: ITS-Helpdesk
To: Evelyn Maxwell <Evelyn.Maxwell>

Posted: 03/13/2017 - 12:02pm
Phishing Email (in the wild)

If past years are any indication, there will be an increased number of phishing scams and malware campaigns this US tax season you should be prepared for.

Posted: 03/09/2017 - 1:38pm
Legitimate Email

This followup email to yesterday's mailing about new BOA PCards is also a legitimate notification sent on behalf of the Controller's Office, givin

Posted: 03/07/2017 - 11:27am
Legitimate Email

Today's mailing regarding new BOA PCards replacing the current JP Morgan cards (expiring March 17) is a legitimate notification from the Controller's Office.

Posted: 03/06/2017 - 3:01pm
Legitimate Email

The following is a legitimate notification from nextSource, Brown's partner for temporary hiring.

Posted: 03/03/2017 - 2:37pm
Legitimate Email

We received some questions about this email, which is from the administrator of Brown's Flexible Spending Accounts.

Posted: 03/01/2017 - 10:07am