Skip to main content

Cornell University

IT@Cornell

How Many Red Flags Can You Spot?

This scamming attempt appeared in Cornell inboxes at the end of August 2025. How many “red flags” can you spot in the well-written email?

This article applies to: Security Training and Compliance

First read the original email, and see how many warning signs there are to spot a potential theft attempt (phishing). Then click the Red Flags tab to see how you compared.

  • Original Email

    Cornell University - Research & Experiential Learning

    Dear Student,

    The Career Planning & Resource Center is offering a remote research internship for students in all academic departments.

    The weekly commitment is about seven hours, and participants will receive a stipend of four hundred fifty dollars.

    If you wish to be considered, reach out to Professor John Cawley at wj.john971@gmail.com and include your name, email, department, phone number, and current year of study.

    Thank you for your interest. We look forward to reviewing your application.

    Sincerely,
    Office of Student Services
    Cornell University

  • Red Flags

    If you counted eight ways to spot this scam, you’re right! Read the notes at the bottom to learn what tactics this email used.

    Cornell University - Research & Experiential Learning1

    Dear Student,

    The Career Planning & Resource Center is offering a remote research internship for students in all academic departments.

    The weekly commitment is about seven hours, and participants will receive a stipend of four hundred fifty dollars.2

    If you wish to be considered3, reach out to Professor John Cawley4 at wj.john971@gmail.com5 and include your name, email, department, phone number, and current year of study.6

    Thank you for your interest. We look forward to reviewing your application.

    Sincerely,
    Office of Student Services7
    Cornell University8

    Notes:

    1. Look it up: it's not a real Cornell department (but it sounds good).
    2. Nice pay for little work -- and it's work from home!
    3. This is all you need to do to apply?
    4. Real professor, but he's in the Economics department. Why is this internship for students in "all academic departments"?
    5. Cornell faculty should use thier @cornell.edu email address, not a cryptic gmail address.
    6. Here's the ask for your personal information!
    7. Wait, isn't this from Research & Experiential Learning?
    8. The signature sure looks official!

Comments?

To share feedback about this page or request support, log in with your NetID

At Cornell we value your privacy. To view
our university's privacy practices, including
information use and third parties, visit University Privacy.