Phish: Academic integrity notice scam

Published: September 10, 2026

This phishing email impersonates an official academic integrity notice and claims that the recipient is involved in an alleged academic integrity matter. The recipient is instructed to download and review an attached document that supposedly contains more information about the alleged violation.

The attached PDF is a crudely put-together document containing U of T’s logo and crest. It instructs the student to click a link within to view their “protected document”. The link leads to a phishing Zoho form designed to harvest UTORid credentials.

Email details

Dear Student,

This correspondence concerns an alleged academic-integrity matter involving your academic work. The matter has been referred for review in accordance with the applicable University of Toronto academic-integrity policies and procedures.

Details regarding the matter, including the nature of the allegation, applicable procedures, and required next steps, are provided in the attached notice.

Your prompt attention is required. Please download and review the attached document carefully and provide any requested explanation, response, or supporting information within the timeframe specified.

Important: A referral of an alleged academic-integrity violation for review does not constitute a finding of academic misconduct. No final determination has been made at this stage. The student will have an opportunity to respond to the allegation and provide relevant information before a determination is reached under the applicable procedures.

Attached Notice
Please download the attached file to view the complete notice and case information.

You should verify any case information and instructions through the University’s official channels.

Please maintain the confidentiality of this correspondence and any related documentation in accordance with applicable University policies and privacy requirements.

If you have questions regarding the review process, applicable deadlines, or your rights and responsibilities, contact the appropriate University office through verified official University of Toronto contact channels.

Sincerely,
Academic Integrity / Student Conduct Administration
University of Toronto

Phishing cues

Poses as a trusted or legitimate source

The sender poses as an authority figure to influence the recipient into taking action.
Lack of contact information

This email does not include contact information. Legitimate business emails typically include contact information.
Sense of urgency

The email implies that the recipient could face disciplinary action if they do not download and review the attached file. This sense of urgency encourages the reader to act under pressure without thinking.
Generic greeting

The email does not include a personalized greeting that indicates it is intended for the recipient.

Malicious PDF attachment

This Document is Protected

Secured File

To view shared file Via PDF File, Click the button below:

View Files

Confidentiality Notice: The information contained in and transmitted with this communication is strictly confidential and is intended only for the use of the intended recipients). If you are not the intended recipient, you are hereby notified that any use of the information contained in or transmitted with the communication or dissemination, distribution, or copying of this communication is strictly prohibited by law. If you have received this communication in error, please immediately return this communication to the sender and delete the original message and any copy of it in your possession.

Report phishing

If you receive a suspicious email, do not open attachments or click on links. Report phishing attempts to security.response@utoronto.ca.

Phish Bowl

Phish Bowl

Phish Bowl