Look at the footer of a Google Form -- the part below the Submit button -- before submitting the form. It is small text, but very important.
Never submit a password on a Google Form. If it is asking for a password it is fake.
Be careful of other information you are asked to enter. Especially if it is an unsolicited -- you didn't ask for it -- email message that sent it to you.
Check where the form was created. A legitimate HCC form will say "This form was created inside of Holyoke Community College." If it doesn't say anything, it is a private Gmail account and could be anyone.
You can Report a form to Google if it is part of a phishing campaign.
DocuSign has been used a lot for sending phishing messages. The message appears to come from the valis DocuSign email address, but the attachment or link is fraudulent.
Most of these are being caught by the spam filter.
Fake Employee Handbook from Quickbooks
Contact The Office of People and Talent with any questions on employee handbook.
Think twice before scanning a QR code. Not all of them are what they claim.
Claiming to be from CITS Service Desk Team.
Uses a Google form to collect information.
Generic greeting and warning.
Contact Help Desk with any questions on your account.
Note:
Student accounts are deleted one (1) year after the last registered class.
Faculty and staff accounts are disabled immediately when leaving the college.
Claiming to be from Financial Aid.
Uses a Google form to collect information.
The real way to manage your electronic transfer accounts is from your myHCC Dashboard through TouchNet.
myHCC Dashboard → My Tuition and Aid → Direct Deposit - Option 1 → Electronic Refunds.
Contact Student Accounts with any questions on refunds.
From an outside email address, sent to several HCC recipients
Too good to be true compensation.
Contact Financial Aid with any questions on work-study.
Claiming to be from Support Team but from a student account.
"You failed to verify your Microsoft account."
HCC does not verify individual user accounts.
Uses a Google form to collect information.
Contact Help Desk with any questions on your account.
This one is a bit laughable. It was sent to users at the wrong HCC.
From students.panola.edu; likely a compromised account.
undisclosed-recipients means it was sent to you with BCC
Fake job offer
Too good to be true: Part-time job amounts to $40 an hour.
Fake job offer
Fake message urging students to update their information on a fraudulent Google Form that was created from within North Carolina Central University Google workspace.
Google Form used as sign in page
Never submit your password in a Google Form.
Make sure the form is letgitimate
Obviously fake job offer.
HCC Graduate students
The School Endorsed This Job Offer
Too good to be true part-time job offer.
Work from home for 2-4 hour for $550 a week? And you'll cover my expenses and taxes? Yes please.
I love that they point out it is a "real" job.
Claiming to be from IT Helpdesk.
Coincides with HCC using Duo, but the Google form is fake.
This is not how we activate Duo.
Contact Help Desk with any questions on MFA.
Form is from a different institution's Google Workspace instance.
Use the Report Abuse link.
Fake form from another institution's Google Workspace.
Check the bottom of the form to ensure that the form was created insidde of Holyoke Community College.
Never submit passwords through Google Forms
Claiming to be from IT Helpdesk.
Always check the full From address, including the domain name.
Check the To (addressee). This may look like a proper address, but it is not.
Confirm wording in the message; we are not a University.
Always verify the URL before proceeding. Hover over the link to see the URL address at the bottom of the screen. Find the top-level domain (the .com .edu .org .net .gov) and look to the immediate left to see where the address is actually taking you.
In this one, it is multiscreensite.com. All other information is designed to convince you that it is authentic.
An example of an authentic HCC address. Note the hcc.edu is close to the left. Look for the dots (as in .com .edu .org .gov .us .net) to see where you are going.