Why Verifying Requests Matters

In today’s digital world, it’s common to receive messages asking for private information, such as your student ID, login credentials, financial info, or even someone else’s data. But just because a request looks legitimate doesn’t mean it is.

Cybercriminals and scammers often impersonate people you know or trust, such as:

Professors or administrators
Tech support or IT staff
Bank representatives
Government agencies

Their goal? To trick you into sharing sensitive data so they can steal your identity, access your accounts, or commit fraud.

Common Tactics Used by Scammers

Here’s how attackers might try to fool you:

Spoofed Emails or Texts: Messages that appear to be from someone you know, but are actually from a fake address.
Urgent Requests: “Your account will be locked unless you respond immediately.”
Impersonation of Authority: “This is your college IT support. We need your password to fix an issue.”
Social Engineering: They may collect bits of real information (e.g., your professor’s name, your course schedule) from public sources to sound more convincing.

How to Respond to Requests for Information

Whenever you’re asked to provide private information—even by someone who seems familiar—follow these best practices:

1. Verify the Identity of the Requester

Check the sender’s email address carefully for misspellings or unusual domains.
If unsure, contact the person through a known, official channel (e.g., your professor's official Collin College email or phone number).
Never give out information via a link or number provided in a suspicious message.

2. Ask Yourself: Does This Make Sense?

Would my professor or Collin’s IT department really ask for my password?
Is there any reason I should be giving out someone else’s information?
Is this request unexpected, urgent, or threatening?

3. When in Doubt, Don’t Respond

If something seems off, report it.
Collin College’s IT Help Desk can confirm whether a request is legitimate.

Social-Engineering-Red-Flags.pdf