Recently, some of our community members received text messages attempting to trick them into sharing their DUO two-factor authentication codes. These messages are part of a phishing scam — fraudulent attempts by cybercriminals looking to gain access to your accounts. 

As finals approach, we see increased phishing scams targeting our students, faculty, and staff and want to remind you if you receive any communication that seems suspicious or requests sensitive information like this, please treat it with caution.  

Here are some reminders to help protect yourself: 

• Always keep your passwords and passcodes private. No legitimate service from UT will ever require you to disclose this information. 
• Be wary of unexpected requests for a DUO push or passcode. These authentication methods are designed for your security; do not accept unexpected PUSH requests or share passcodes; providing this access can compromise your account. 
• Stay vigilant and report phishing attempts.  
  • Check the email scams page for recent scams.
  • If you are unsure about the authenticity of a message and contact the OIT HelpDesk if you do not see the scam. 
  • Visit the OIT Knowledge Base for instructions on how to report a scam. 

If you suspect that you have responded to a phishing message, please contact the OIT HelpDesk immediately at 865-974-9900.