Staying cyber safe in everyday moments

Whether you’re checking emails, logging into RMIT systems or sharing information, small everyday actions can make a big difference in keeping your account, data and the RMIT community safe. 

Simple ways to stay cyber safe include: 

• Pause before you click: Treat unexpected messages, links and requests with caution, and check the sender before you respond 
• Verify with a known source: This can be visiting the official website to confirm the information or simply calling up the person or service to verify directly 
• Protect your accounts: Use strong, unique passwords, turn on multi-factor authentication where possible and lock your screen when you step away 
• Share information safely: Keep your RMIT login details to yourself and don’t forward RMIT information or files to personal email accounts 
• Report suspicious activity quickly: Flag anything unusual so it can be checked and blocked before it reaches others. This can be via the report button in your Outlook or reaching out to IT Service Connect directly 
• Be cautious with unknown callers: Scams pretending to be university help desk and other services are used to obtain your credentials or trick you into paying for something urgent. Always verify through official channels and know that RMIT will never ask you for credentials or threaten you to pay for something urgently.  

Phishing emails are one of the most common ways attackers try to access accounts and information. With AI making some scams harder to spot, it’s important to pause, verify and act before you click. 

Recently, RMIT has experienced phishing scams targeting students such as: 

• Gift card scams – these can happen in different contexts, but they usually involve someone asking you to buy gift cards and share the codes as a form of payment. This is never a legitimate request, and no one from RMIT will ask you to pay this way 
• Internship and employment opportunity scams – these can be presented in different ways and are often used to collect personal information or carry out financial scams. Be cautious of work placements or job opportunities that are not endorsed by RMIT and always check opportunities through trusted websites or sources. 

If you receive an email that looks suspicious: 

• Do not click links or open attachments
• Use the Report button (shield icon) in Outlook to flag the email for review. 

If you have clicked a suspicious link or opened a suspicious attachment, contact IT Service Connect (9925 8000) right away for help. 

Reporting is always the right call, even if you've already clicked. 

Phishing red flags to look out for: 

• Requests for passwords, payment details, or personal information 
• Sender names, email addresses, or domains that do not look right 
• Unexpected links or attachments, especially with urgent instructions
• Messages that feel unusually urgent, personalised or convincing. 

• If you have clicked a suspicious link or opened a suspicious attachment, contact IT Service Connect (9925 8000) right away for help
• For practical tips to protect your accounts, devices and information, see RMIT’s Cyber Safety page
• To learn about scams currently targeting students, how to identify and avoid them, and where to get help if you think you've been targeted, see RMIT’s Scams Targeting Students page
• If you suspect you have been or are being scammed, you are strongly encouraged to contact the RMIT Safer Community service for advice and support. 

Everyone at RMIT plays a part in keeping accounts, systems, and information safe. As a student, you can help by following the guidance in: 

• Information Technology and Security Policy 
• Acceptable Use Standard – Information Technology.