shortcut to content
Minnesota State University, Mankato
Minnesota State University, Mankato

Beware Sketchy Messages

Page address:

By Khalid Diriye

Phishing is an attempt to steal your account access by getting you to give out account login details, stemming from fraudulent emails, pop-ups or redirected to other sites/apps.

Example of Phishing messages

  • “There has been an unauthorized transaction to your account! Please click below for more information and confirm your identity.”
  • “We are having a system Re-activation of all Web-mail accounts due to some technical issues on our system please CLICK HERE to re-activate your account.”
  • “You are being contacted on behalf of the Information Security Department because your campus account was identified as having been used to illegally copy and/or distribute copyrighted material. Please reply with your starID and password so we can re-activate your account.”

Example of a [non-phishing] email you will receive from ITS at Minnesota State University, Mankato


Hello User,

There was a malicious e-mail sent out to many users on our campus. We performed an audit of the location the malicious e-mail linked to and found evidence that you have followed this link.

Due to this we highly recommend resetting your campus password. Instructions for doing this can be found by copying and pasting this link into your browser: (Notice HTTPS meaning "connection is encrypted").

You may call the service desk with any questions regarding this process at (507) 389-6654.

Thank you,
Information Security Team
Minnesota State University, Mankato


Phishing emails generally do not look normal so play close attention to your emails and make sure all links and contacts are valid before actually trusting the source. Don’t reply to email with any personal information or passwords. If you have reason to believe that the request is real, call the institution or company directly.

As a reminder, ITS at Minnesota State University, Mankato will never ask you to provide personal or confidential information in an email. Please do not send your password or any other personal or confidential information in response to emails. Use the self-service interface on the ITS website ( to reset your password if you need to.