Skip to content

Which types of emails should I report for phishing?

You should report any email that you find suspicious or that you were not expecting. Common indicators of a phishing attempt include:

  • Requests for urgent payment, such as accommodation fees, tuition top-ups, or administrative charges — the University will never ask you to make payments via email links.

  • Requests for your University login credentials, banking details, or personal identification.

  • Offers of unexpected refunds, grants, or bursaries that require you to submit financial information.

  • Emails threatening account suspension or access restrictions unless you act immediately.

  • Messages from unfamiliar senders impersonating University staff, Student Services, Accommodation Services, or external organisations such as UCAS or the Student Loans Company.

If you are unsure whether an email is genuine, do not engage with it. Use the Report Phish button and the Cyber Security Team will advise you.

Need immediate support?
Find out how

If you are unable to access Surrey Support, please contact us via our enquiry form.