Skip to main content

Phishing email updated: 25 November

In an update to previous phishing email scams a new email has emerged, it is not targeted directly to Warwick staff but anyone who receives this should not click on the link, but delete the email.

Current Phishing email examples

The email is entitled Fax Message and is coming from multiple sites so doesn’t have a definitive 'From' address.

Subject: Fax Message [Caller-ID: 1-407-536-4957]


You have received a 3 page fax at Tue, 25 Nov 2014 12:37:44 +0000.

* The reference number for this fax is chd_did11-19096076127-10440800229-241.

View this fax using your PDF reader.

Thank you for using the MyFax service!

The text of the email claiming to be from HR Revenue is as follows:

Subject: Important information about your taxes or Important tax account information

It was determined that you are due a tax refund of £1490 after a routine yearly analysis of your tax records.
Refunds are usually delayed because of incomplete information in our database. Please supply your refunds information by clicking the link in the space below.

Refund processing link
It is important that you submit your payment information immediately to avoid delays.


HM Revenue & Customs

The text of the email claiming to be from Warwick is as follows:

Subject: Account update required

Dear User.

Due to a recent update in the University of Warwick database. All users are hereby advised to update their account information to avoid service interruption. To update your account click on the link below.

University of Warwick Database Account Update

University of Warwick

Further information

Please note IT Services will never ask you to submit your account details online. Although the page links to a web page that looks like the Warwick log in screen, the address bar will show a page that does not start "". You should not enter your login details into a page that does not start with

If you'd like more information about spam and "phishing" emails, please visit the ITS website.

If you have accidentally put your login details into the page, change your password immediately at