Email: Scam messages in Cardiff University mailboxes

We are currently investigating a high volume of scam emails delivered to Cardiff University accounts. These messages use several tactics, including: •Prompts to call a phone number to claim an expensive tech prize. •Links to files with misleading names such as “Cardiff University” or “Cardiff University March 2026 Payroll Update”. •Sender addresses that may appear to come from within the University. Our security teams are isolating and removing these messages and blocking any associated malicious links or files. You do not need to report receiving these emails, but you may use the Report Message button in Outlook if you wish. If you have clicked a link in one of these emails and have entered your username or password, please change your password immediately and contact the IT Service Desk. Please continue to follow our guidance on staying safe (search on the intranet for scam messages), including checking whether you were expecting an email or shared file before interacting with it.