Many UVMers received a fake "Service Notice" email indicating webmail accounts would be deactivated without "confirming" account password information. This and all emails that ask you to divulge your UVM password are scams. Do not reply to this or any email that asks you to provide passwords or other authentication information.

What to do if you've replied

If you've replied to the "Service Notice" email or followed its included link and filled out the form, you should change your password immediately at www.uvm.edu/account. Contact the UVM Computing Helpline if you need assistance changing your password.

How to detect the scam

Viewing the full text of the "Service Notice" email has several identifiers revealing it as a scam:

Subject: Service Notice
Date: Tue, 13 Jul 2010 20:11:23 +0200 (CEST)
From: The University of Vermont
Reply-To: vc.noreply@uvm.edu
To: undisclosed-recipients:;

The University of Vermont
Due to the congestion in all UVM !webmail users accounts,University of Vermont!would be shutting down some webmail account.In order to avoid the deactivation of your webmail account,you will have to confirm to activate or deactivate your e-mail by clicking the secure Link Below.The personal information requested are for the safety of your UVM account. Please leave all information requested.

secure login: click here:
http://www.123contactform.com/contact-form-2000airtrak-79543.html

Thanks
Vice-Chancellor

Copyright © 2010 The University of Vermont

Common scam elements include:
  1. poor English syntax and/or grammar:
    • for example, "University of Vermont!would be shutting down some webmail account" and "The personal information requested are for the safety of your UVM account."
  2. the "secure Link" does not go to a UVM address:
    • in this case, 123contactform.com is not part of UVM.
  3. vague or unspecific sender or authority:
    • legitimate messages from UVM will be most likely signed by a particular person. In this case, not only is the "Vice Chancellor" not identified, but UVM does not have a vice chancellor at all.
  4. fake reply address:
For more information about phishing scams, view our Web page on protecting your NetID and password.