Starting this month, the Office of Innovative Technologies (OIT) will conduct monthly phishing simulations to improve attentiveness to phishing and fraudulent email messages among UT’s faculty, staff, and students. OIT will send the phishing simulations to the faculty, staff, and students at UT Knoxville, UT Space Institute, UT System Administration, Institute of Agriculture, and Institute of Public Service. 

What You Can Expect

• You will receive simulated phishing emails that mimic real-world phishing attempts each month.

• We will provide advanced notice in some months, and others will be unannounced. 

• These educational simulations will help you recognize and respond appropriately to potentially harmful emails. 

• If you fall for a simulation, don’t worry— we will provide immediate feedback and resources to help you understand why this email is considered phishing and what clues to look for in the future.

What Should You Do

If you suspect that you have received an actual phishing email, please take the following actions.

1. Check to see if the scam is listed at oit.utk.edu/scams.  

2. If you do not see the scam, use the Report Message button in Outlook and the Report Spam button in Gmail to submit the scam to OIT. 

3. Delete the message. 

View detailed instructions on reporting suspicious emails in the OIT Knowledge Base. 

Why This Matters

Phishing attacks are among the most common methods cybercriminals use to gain unauthorized access to sensitive information. These simulated phishing messages are not meant to trick anyone; instead, they are intended to impress the importance of looking closer at the mail you receive, even when it appears to come from a trusted source. 

Participating in these simulations can enhance our security awareness and protect personal and university data from potential threats. 

How You Can Help 

• Stay Informed: Educate yourself on the best practices for identifying phishing emails. 

• Be Vigilant: Always scrutinize unexpected or suspicious emails before clicking links or sharing information. 

• Provide Feedback: Let us know if there are specific types of phishing attempts you’d like more information and training on. 

We appreciate your cooperation. If you have any questions, please submit a request online or contact the OIT HelpDesk.