Skip to main content

Cornell University

Latest News

The Ezra statue holds a sign that says student assistance urgently needed. First we need your personal info ASAP.

The start of the semester also brings a new onslaught of attempts to part you from your NetID. You worked hard to earn that NetID, and it’s up to you to safeguard it from thieves. Here are some tips to help you do exactly that. 


Suspect Social Engineering

With social engineering, the scammer tries to leverage your thoughts and emotions. Two examples: 

Your active credentials & service on this account (netid@cornell.edu) is due for expiry today August 28, 2025. 

 

Due to a recent update in our student records system, your financial aid status has been flagged for review. To avoid interruption of your tuition coverage, please verify your student information immediately. 

 

Know the Warning Signs 

Scams like this rely on: 

  • Urgency: “Immediately” and “today” creates pressure to act quickly
  • Fear: The threat of losing something valuable to you
  • Authority: Pretends to be from university staff or departments
  • Impersonation: Uses a realistic-looking email and link 

If It’s Too Good To Be True… 

When you see a job opportunity that offers $450 a week for 7 hours of weekly work (an astonishing $64 per hour), that should raise red flags in your mind. These scamming attempts try to work a “long con” on you: 

If you wish to be considered, reach out to Professor John Cawley at wj.john971@gmail.com and include your name, email, department, phone number, and current year of study. 

 

The scammer hunts for people who might need access to cash without a huge burden on their time. When you reply, the scammer knows you’re nibbling at their hook and will try to reel you in, and then steal your password or, worse yet, your cash. 

This excerpt came from an actual theft attempt. If you spotted four “red flags” from this one sentence, you have great instincts! 

See if you can spot all the potential warning signs in the original identify theft attempt.

Cornell Gives You Tools to Avoid Getting Hooked 

  • Find real university jobs through the Student Employment website.
  • Browse legitimate internship opportunities through Career Services.
  • Protect your classmates: report suspected phishing attempts with PhishAlarm.
  • Check the PhishBowl for the latest attempts to net Cornell students in scams.
  • Use Cornell Verified Communications (login required) to confirm a legitimate-looking message.
  • When in doubt, contact the Cornell person or department using the information in the Cornell directory (not the email sent to you).

Comments?

To share feedback about this page or request support, log in with your NetID

At Cornell we value your privacy. To view
our university's privacy practices, including
information use and third parties, visit University Privacy.