Explore the U of T Phish Bowl

The Phish Bowl features a collection of the most commonly seen reported phishing attempts that target U of T inboxes. Check back here often to get the most up to date information on phishing trends that may be affecting the university.

If you have received a suspicious email, report it via the “UofT Report Phishing” feature through Outlook or forward it to report.phishing@utoronto.ca if that is otherwise not available.

  • March 6, 2025

    This phishing attempt offers students a paid position as a Store Evaluator. It asks students to send their personal information to an external email address under the guise of a well-compensated job opportunity.

  • March 6, 2025

    This phishing email attempts to trick recipients into downloading an attachment containing a virus. The attachment can be used to steal personal information and login credentials and gain unauthorized access to the user’s account.

  • August 26, 2024

    This phishing email attempts to steal personal information, login credentials and Duo passcodes by providing false information about the user’s U of T account being filed for deactivation.

  • August 26, 2024

    This phishing attempt is known as quishing, a social engineering tactic where malicious actors use QR codes to steal information from unsuspecting recipients. This message was sent to U of T community members via LinkedIn.

  • August 26, 2024

    This job offer scam is a form of phishing used to take advantage of students and new graduates who are seeking employment.

  • August 26, 2024

    This email poses as a legitimate email for U of T Giving Day, a real U of T initiative, and asks recipients to donate cryptocurrency for the opportunity to win a laptop.

  • August 26, 2024

    This job offer scam is a form of phishing used to take advantage of students and new graduates who are seeking employment.