An email from a compromised account at UB or from an outside email address claims that a hold has been placed on your Fall semester registration asks you to click on a link to a "verification portal". Link goes to a phishing page.

1. The message originated from a UB address but not from a legitimate UB department account.
2. Hovering over the URL reveals that the URL is not a UB link.

• Note: UB will NEVER ask for the information requested via SMS or any other method

Immediately change your password, verify devices in Duo only incude your own, and contact the UBIT Help Center if you see any other unusual activity on your account.