Explore the U of T Phish Bowl
The Phish Bowl features a collection of the most commonly seen reported phishing attempts that target U of T inboxes. Check back here often to get the most up to date information on phishing trends that may be affecting the university.
If you have received a suspicious email, report it via the “UofT Report Phishing” feature through Outlook or forward it to report.phishing@utoronto.ca if that is otherwise not available.

March 6, 2025
This phishing attempt offers students a paid position as a Store Evaluator. It asks students to send their personal information to an external email address under the guise of a well-compensated job opportunity.
March 6, 2025
This phishing email attempts to trick recipients into downloading an attachment containing a virus. The attachment can be used to steal personal information and login credentials and gain unauthorized access to the user’s account.
August 26, 2024
This phishing email attempts to steal personal information, login credentials and Duo passcodes by providing false information about the user’s U of T account being filed for deactivation.
August 26, 2024
This phishing attempt is known as quishing, a social engineering tactic where malicious actors use QR codes to steal information from unsuspecting recipients. This message was sent to U of T community members via LinkedIn.
August 26, 2024
This job offer scam is a form of phishing used to take advantage of students and new graduates who are seeking employment.
August 26, 2024
This email poses as a legitimate email for U of T Giving Day, a real U of T initiative, and asks recipients to donate cryptocurrency for the opportunity to win a laptop.
August 26, 2024
This job offer scam is a form of phishing used to take advantage of students and new graduates who are seeking employment.