Email Security Best Practices

ALWAYS

• check the email ‘From’ field to validate the sender. This ‘From’ address may be spoofed.
• check for so-called ‘double-extended’ scam attachments. A text file named ‘safe.txt’ is safe, but a file called ‘safe.txt.exe’ is not.
• report all suspicious emails to the Help Desk.
• note that www.microsoft.com and www.support.microsoft.software.com are two different domains. (and only the first is real)

DO NOT

• open any email attachments that end with: .exe, .scr, .bat, .com, or other executable files you do not recognize.
• “unsubscribe” - it is easier to delete the e-mail than to deal with the security risks.
• never click embedded links in messages without hovering your mouse over them first to check the URL.
• respond or reply to spam in any way. Use the delete button.