Recently, we have received monitoring alerts from the internet regarding frequent phishing email attacks occurring domestically. These emails mainly use subject lines or content such as "2025年度专项个税事务" and "2025年一季度个人劳动薪资财政补助》申领通知" to lure recipients into providing personal information, bank card details, and verification codes. The aim is to illegally steal funds from bank accounts and acquire personal information. The email senders typically use official government names as the display name, such as " XX政务服务". However, upon checking the sender's details, it can be found that they are sent from other email addresses.

Please be vigilant in identifying the authenticity of emails and do not fall victim to these scams. Below are methods for identifying and preventing phishing emails.

1.Pay attention to the email sender's address. Check if the sender's address matches the official email address of legitimate organizations. Note that attackers may sometimes spoof email addresses, but there are usually subtle differences, such as misspellings or incorrect domain names.

2.Be alert when clicking on links. Hover over the links in the email to verify if the actual URL matches the displayed URL. Avoid downloading attachments, especially from unknown senders, as they may contain malicious software.

3.Manually enter website addresses. If you receive an email involving sensitive information, it's best to manually enter the website address rather than clicking on links in the email.

4.Check grammar and spelling. Carefully read the email content and look for any unusual grammar errors, spelling mistakes, or semantic errors. Phishing emails often contain these errors because they are often written by non-professionals.

5.Keep calm in an emergency or threat. Phishing emails often create urgent situations or threats to compel you to react, such as clicking on links or providing personal information. If you receive such emails, remain calm and avoid an immediate response.

6.Contact the sender or other official contacts. If you suspect the authenticity of an email, try to contact the sender through other means, such as phone, official website contact information, or official channels, rather than using the contact information provided in the email.

If you encounter a suspected phishing email, please feel free to contact us at <gzit@hkust-gz.edu.cn>.