1️⃣ URGENCY + FEAR

• “Your account will be disabled today”

“Act within 2 hours”

• Attackers want you to panic so you click without thinking.

2️⃣ SUSPICIOUS SENDER

Email comes from a look‑alike domain, not your real school.

• Example: schoolverify-secure.com instead of your actual school domain. 

3️⃣ DANGEROUS LINK

“Verify Now” button leads to a fake login page.

• Real IT departments never ask for passwords through email links.

4️⃣ GENERIC GREETING

“Hello Student”

• Scammers don’t know your name — they send the same email to thousands of people.

5️⃣ THREATS

“Permanent deactivation”

• Threats = classic social engineering pressure tactic.

6️⃣ ODD GRAMMAR / TONE

• Slightly weird phrasing

Unprofessional wording

• These small mistakes are common in phishing emails.

🧠 HOW TO PROTECT YOURSELF

• Don’t click links in unexpected emails

• Check the sender’s domain carefully

• Look for urgency or threats

• Report suspicious emails to IT

• Go directly to the official website instead of using email links