Can I report a phishing email sent from another University of Surrey email account?

You can report phishing emails from another University of Surrey email account. One of the most effective tactics used by cyber criminals is to first compromise a trusted internal account — such as a fellow student's or staff member's University of Surrey email address — and then use it to send convincing phishing messages to others within the institution. Because these emails appear to come from a familiar, legitimate source, they can be particularly deceptive.

If you receive an email that seems suspicious, even if it appears to have been sent from a @surrey.ac.uk address, please report it. The Cyber Security Team will investigate to determine whether the sending account has been compromised and take appropriate action.