How can I tell whether an email is genuinely from the University of Surrey?

Legitimate emails from the University of Surrey will come from addresses ending in @surrey.ac.uk. However, cyber criminals can sometimes send emails that appear to come from an @surrey.ac.uk address if an internal account has been compromised.

Regardless of who an email appears to be from, it should be treated as suspicious if it:

• Requests an urgent or unexpected payment

• Asks for a password, banking details, or personal information

• Contains links to websites that do not end in surrey.ac.uk

• Creates a sense of urgency or threatens consequences for not acting immediately

If in doubt, contact the relevant University department directly using contact details from the official University website (surrey.ac.uk) — not by replying to the email or using any contact details it contains.