Look at the footer of a Google Form -- the part below the Submit button -- before submitting the form. It is small text, but very important.
Never submit a password on a Google Form. If it is asking for a password it is fake.
Be careful of other information you are asked to enter. Especially if it is an unsolicited -- you didn't ask for it -- email message that sent it to you.
Check where the form was created. A legitimate HCC form will say "This form was created inside of Holyoke Community College." If it doesn't say anything, it is a private Gmail account and could be anyone.
You can Report a form to Google if it is part of a phishing campaign.
Forms from other providers may have different reporting methods.
Fake message:
Have you requested to terminate or shut down your account? If so, please disregard this message.
If you did not make this request, you must respond immediately by re-verifying your email account, this is a measure just to verify and unmark your account out of termination.. Failure to respond will result in the account shutdown process beginning right away by the administrator.
If the message is sending you to a place where they can't write the word "Password" then you know it is fake.
NEVER enter your password in plain text on a form.
Another Fake Job offer:
Please Note: This position has received formal approval and is officially recognized by the institution.
This is like saying "No, this isn't a scam."
Another Fake Job offer:
Flexible Opportunity to work remotely where you will determine your working time. You can be in any location and work from your home/school.
Position P.A : Personal Assistant & Errand Carried out
Type : Part-Time Job
Monday- Saturday : Working Days
Weekends : ( Sunday OFF)
Working Hour : 1 Hour 30 min Per Day
Weekly Payment : $450
Communication Skills : English
Why wouldn't they want you to send from your school email account? $450 for 90 minutes of work a day? Sounds too good to be true.
DocuSign has been used a lot for sending phishing messages. The message appears to come from the valis DocuSign email address, but the attachment or link is fraudulent.
Most of these are being caught by the spam filter.
Fake Employee Handbook from Quickbooks
Contact The Office of People and Talent with any questions on employee handbook.
Think twice before scanning a QR code. Not all of them are what they claim.
Claiming to be from CITS Service Desk Team.
Uses a Google form to collect information.
Generic greeting and warning.
Contact Help Desk with any questions on your account.
Note:
Student accounts are deleted one (1) year after the last registered class.
Faculty and staff accounts are disabled immediately when leaving the college.
Claiming to be from Financial Aid.
Uses a Google form to collect information.
The real way to manage your electronic transfer accounts is from your myHCC Dashboard through TouchNet.
myHCC Dashboard → My Tuition and Aid → Direct Deposit - Option 1 → Electronic Refunds.
Contact Student Accounts with any questions on refunds.
From an outside email address, sent to several HCC recipients
Too good to be true compensation.
Contact Financial Aid with any questions on work-study.
Claiming to be from Support Team but from a student account.
"You failed to verify your Microsoft account."
HCC does not verify individual user accounts.
Uses a Google form to collect information.
Contact Help Desk with any questions on your account.
This one is a bit laughable. It was sent to users at the wrong HCC.
From students.panola.edu; likely a compromised account.
undisclosed-recipients means it was sent to you with BCC
Fake job offer
Too good to be true: Part-time job amounts to $40 an hour.
Fake job offer
Fake message urging students to update their information on a fraudulent Google Form that was created from within North Carolina Central University Google workspace.
Google Form used as sign in page
Never submit your password in a Google Form.
Make sure the form is letgitimate
Obviously fake job offer.
HCC Graduate students
The School Endorsed This Job Offer
Too good to be true part-time job offer.
Work from home for 2-4 hour for $550 a week? And you'll cover my expenses and taxes? Yes please.
I love that they point out it is a "real" job.
Claiming to be from IT Helpdesk.
Coincides with HCC using Duo, but the Google form is fake.
This is not how we activate Duo.
Contact Help Desk with any questions on MFA.
Form is from a different institution's Google Workspace instance.
Use the Report Abuse link.
Fake form from another institution's Google Workspace.
Check the bottom of the form to ensure that the form was created insidde of Holyoke Community College.
Never submit passwords through Google Forms
Claiming to be from IT Helpdesk.
Always check the full From address, including the domain name.
Check the To (addressee). This may look like a proper address, but it is not.
Confirm wording in the message; we are not a University.
Always verify the URL before proceeding. Hover over the link to see the URL address at the bottom of the screen. Find the top-level domain (the .com .edu .org .net .gov) and look to the immediate left to see where the address is actually taking you.
In this one, it is multiscreensite.com. All other information is designed to convince you that it is authentic.
An example of an authentic HCC address. Note the hcc.edu is close to the left. Look for the dots (as in .com .edu .org .gov .us .net) to see where you are going.