Cyber Security Awareness Month: tips to stay safe online
As a student there are unfortunately a lot of situations that scammers would target such as looking for accommodation or waiting for student finance payments.
The good news is that most scam messages share common warning signs. Knowing what to look for can help you protect your personal information, money and University accounts:
Be wary of messages that pressure you to act quickly
Scammers often create a sense of urgency to stop you thinking carefully about a message.
They might claim that:
- Your account is about to be closed
- A payment is overdue
- Your visa is at risk
- You'll lose access to a service unless you act immediately
If a message is trying to rush you into making a decision, take a step back and check that it's genuine before responding.
If it looks too good to be true, it probably is
Students are regularly targeted with fake job offers, accommodation scams, competition prizes and money-making opportunities.
Be cautious if someone is promising quick cash, unusually high pay, free gifts, or deals that seem much better than anything else available.
Think carefully before sharing personal information
Legitimate organisations will not ask you to share sensitive information through unexpected emails, text messages or social media messages.
Never share:
- Passwords
- Bank details
- Verification codes
- Multi-factor authentication (MFA) codes
If you're unsure whether a request is genuine, contact the organisation using details from their official website.
Check links before you click
Scammers often create websites that look convincing but use fake web addresses.
Before clicking a link, take a moment to check where it leads. Look out for:
- Misspellings
- Extra words or numbers
- Unusual website names
- Links that don't match the organisation they claim to be from
For example:
✅ login.bham.ac.uk
❌ bham-login-secure123.net
If a link doesn't look right, don't click it.
Trust your instincts
Sometimes a message just doesn't feel right.
It may contain spelling mistakes, poor grammar, unusual wording or a tone that seems unprofessional.
While scammers are becoming more sophisticated, these signs can still indicate that a message isn't genuine. If something feels off, trust your instincts and take a closer look before responding.
A note for international students
Scammers sometimes target international students by pretending to be from immigration authorities, government departments or visa services.
These messages often demand urgent action or immediate payment and may threaten consequences if you do not comply.
If you receive a message like this, verify it through official channels before taking any action.
A few simple ways to protect yourself
You don’t need to be a cyber security expert to protect yourself. A few good habits can make a big difference.
- Always use a long, unique password or passphrase for every account
- Turn on multi-factor authentication (MFA) where available
- Use a passkey rather than a password if available
- Keep your devices and apps up to date
- Avoid clicking links or downloading attachments from unexpected messages
- Never share your passwords with anyone
What should I do if I receive a suspicious message?
Remember: Stop. Check. Protect.
Stop and think before responding
Check by verifying the request through a trusted source
Protect your accounts and personal information by avoiding links, attachments or requests that seem suspicious
If you receive a suspicious email to your University account, use the Report Email button in Outlook to report it.
If you think you may have clicked a suspicious link or entered your details into a fake website, don’t panic.
- Change any affected passwords immediately
- Contact your bank if payment details may have been exposed
- Contact the IT Service Desk as soon as you can
- Keep screenshots or evidence where possible
The sooner you act, the easier it is to limit any potential harm.