#Report a suspicious email

Phishing is the most common way student accounts get taken over. If a message asks for your password, pushes you to act urgently, or comes from an address that only looks like DigiPen or SIT, treat it as suspicious.

#What to do

1. Do not click any link, and do not open attachments.
2. Do not reply, and do not forward it to classmates.
3. Report it — see the table below for where.
4. Delete it once you have reported it.

#Where to report it

Attach the message if you can, or send a screenshot showing the sender address and the time it arrived. Those two details are what let us find out who else received it.

#If you already clicked or entered your password

Do these in order. Speed matters more than embarrassment — this happens to careful people.

1. Change the password immediately.
   • DigiPen account: drama.digipen.edu/people/password/reset
   • SIT account: selfservice.singaporetech.edu.sg
2. If you reused that password anywhere else, change it there too.
3. Tell the helpdesk — call 6577 1901 (DigiPen) or 6592 8511 (SIT), 9am to 5pm. Say that you entered your password into a suspicious page. Nobody will be annoyed with you.
4. Check your mailbox rules and forwarding settings. Attackers often add a hidden forwarding rule so they keep receiving your mail after you change the password.

#Signs worth a second look

• The sender’s display name is right but the address behind it is not.
• A deadline that would cost you something: “your account closes today”.
• A login page that is not on a digipen.edu or singaporetech.edu.sg address.
• An unexpected attachment, especially one that asks you to enable macros.
• A password reset you did not request — that means someone else is trying.

DigiPen IT will never ask for your password, by email, phone or in person. Neither will SIT IT. A request for your password is a request from an attacker.

#Related

• Who runs what — which helpdesk owns which account
• Start here