What should I do if I receive a suspicious text message (smishing) or phone call (vishing)?

Phishing attacks are not limited to email. Criminals also use text messages (known as smishing) and phone calls (known as vishing) to attempt to steal personal or financial information.

You should not act upon a suspicious text message purporting to be from the University, a bank, or another trusted organisation. Do not click any links or call back any numbers provided in the message. You should report it to the Cyber Security Team at phishing@surrey.ac.uk with as much detail as possible.

If you receive a suspicious phone call is asking for personal, financial, or login information, you should hang up. The University will never cold-call students or staff to request sensitive information. Any call can be verified by contacting the relevant department directly using the number published on the University website.

You can also report suspicious text messages to your mobile network provider by forwarding them to 7726 (free of charge on all major UK networks).