# Phishing Awareness ![Under Water Scene With Goldfish And Login Information Attached To Large Hook](/sites/g/files/omnuum12036/files/styles/hwp_1_1__360x360_scale/public/2026-06/phishcreds.jpeg?itok=Z-xFFIAc) ## Phishing Awareness Phishing remains a significant threat to our digital privacy and data security. Although our security tools successfully block most phishing emails each month, a few may still slip through to your inbox. You are our strongest line of defense against these threats. ## About the Phishing Simulation Program When it comes to spotting phishing emails, practice is important. Our simulated phishing awareness and reporting exercises are designed to give the Harvard community experience in recognizing and reporting phishing messages to help keep you and our community safe. We do this so when real phish show up in your inbox, you’ll know exactly what to do. ### These exercises will: - Deliver simulated phish based on actual phishing attempts found at the University - Give our community experience in identifying and reporting phishing emails - Reward consistent reporters - Provide an evidence-based understanding of our community’s phishing risks ### These exercises will not: - Send “gotcha” emails using messages more sophisticated than we typically receive. - Directly impersonate Harvard departments or services. - Report the identities of those who click. - Assign mandatory training or take punitive action against those who click. ### What to expect Email users should expect to receive a simulated phish once per month. Like any suspected phishing message, it should be reported using the "Report" phishing button in your Outlook toolbar or by forwarding to [phishing@harvard.edu](mailto:///phishing@harvard.edu). You will be notified that the phish was a simulation. If you miss it and accidentally click, you’ll see a page that reassures you it’s just practice and highlights the warning signs to watch out for next time. Close that page and continue to report the email. After all, it’s good practice. Visit the [Prevent Phishing page](https://privsec.harvard.edu/prevent-phishing) for more tips and information on how to recognize phishing. ## Phish Bowl Choose a month below to view a PDF recap of past phishing simulations, what the "clues" were to identify the phish, and how we did. (HarvardKey required) [### 2026 - April-May ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2026%20April.pdf?csf=1&web=1&e=kpiqkV)This month's phish was an email from 'Xfinity' luring you to click on a link to verify system maintenance. [### 2026 - March ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2026%20March.pdf?csf=1&web=1&e=V1GqvO)This month's phish was an email from 'Paychex' attempting to seem important by referring to tax documents. [### 2026 - February ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2026%20February.pdf?csf=1&web=1&e=jZ6dVU)This month's phish was an email from ‘Krispy Kreme’ luring your sweet tooth with the plot of free donuts! [### 2026 - January ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2026%20January.pdf?csf=1&web=1&e=sEcnMQ)This month's phish was from 'Google' photos luring you to click. [### 2025 - October ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2025%20Oct.pdf?csf=1&web=1&e=PFfvqG)This month's phish was 'from' Walmart with a scary good Halloween giftcard! [### 2025 - September ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2025%20-%20Sept.pdf?csf=1&web=1&e=TdWbqN)"Ticketmaster" trying to lure you into clicking a fake pre-sale of concert tickets. [### 2025 - July/August ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2025%20July-Aug.pdf?csf=1&web=1&e=orRnAq)"Travel Perks" trying to lure you into clicking by telling you that your travel plans had changed. [### 2025 - June ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2025%20June.pdf?csf=1&web=1&e=79gUWI)"Meta AI" luring users to click by claiming to have an unread message for you to view. [### 2025 - May ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2025%20May.pdf?csf=1&web=1&e=hotApv)"Google Play" luring users to click by claiming to have an upcoming charge on their account from Canvas Teacher. [### 2025 - April ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2025%20April.pdf?csf=1&web=1&e=pswbOY)"ZocDoc" trying to get you to click on a link in your email. [### 2025 - March ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2025%20March.pdf?csf=1&web=1&e=mSd6Ld)"Adobe" was trying to convince you that your tax information was in danger. [### 2025 - February ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2025%20February.pdf?csf=1&web=1&e=FPE0ad)“Amazon” trying to get you to change a Subscribe and Save order via clicking a link.​ [### 2025 - January ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2025%20January.pdf?csf=1&web=1&e=3QscGu)"TikTok" tempting you to click the link or risk exposing your personal information. [### 2024 - November ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2024%20Nov.pdf?csf=1&web=1&e=fc3Mnd)"American Airlines" enticing you to click a link for a super low deal on airfare. [### 2024 - October ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2024%20Oct.pdf?csf=1&web=1&e=gdMfMW)"Federal Election Commission" trying to convince you to register to vote online. [### 2024 - September ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2024%20Oct.pdf?csf=1&web=1&e=gdMfMW)"Zoom" with a fictitious story about you being mentioned in a transcript. [### 2024 - August ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2024%20Aug.pdf?csf=1&web=1&e=zrczpP)"Eventbrite" with a fictitious story about problems with your ticket purchase. [### 2024 - July ](https://hu.sharepoint.com/:b:/r/sites/AwarenessVideos/Shared%20Documents/Phish%20Bowl/2024%20July.pdf?csf=1&web=1&e=tzrwfh)"Amazon" announcing the retirement of Alexa. arrow\_back arrow\_forward