Scam Warnings



More information



Message that an email account was temporarily blocked because of unusual activity. A link is provided to verify the account in order to unblock it.  

This is a phishing scam. Do not click on the link provided or enter your UP login credentials.

Although UP may temporarily block an account displaying unusual activity, you will never be requested to click on a link in an email to reactivate such an account. 


Letter of demand

A link is provided to view a letter of demand from 'SARS Debt Collector'. The recipient is threatened with court summons and blacklisting. 

This is a phishing attempt. Do not click on the link provided in the email.

Click here for more information on this scam.

Facebook group: 

Response to student queries

Students aksing questions on an unofficial Facebook group for UP students get offers of help from other members of the group, who then request them to provide them with their student numbers and passwords.  

Click here for more information on this scam.

These are attempts to steal your login credentails.

Never disclose your password to anyone. If you had done so, change your password immediately.  

When doing business with UP by email, always ensure that the recipient is using a email account. 


Reference: SPF3527283

A message, apparently from Samsung in South Korea, requesting the recipient to read an attached message and to contact their banker for a payment.    The attachments are safe, but falsely inform the recipient of a promotional gift of One Million British Pounds. Do not engage with the sender, and mark the email as spam.  


Urgent notification

A warning, seeming to be from UP, stating that  your account had been accessed from a foreign country and providing a link to 'secure your account if this wasn't you'. 

The email is not from UP and is a phishing scam. Do not respond, but mark it as spam. 

Recipients who have responded by logging in using the provided link, should change their passwords immediately. 


Account suspension

Warning that your account will be 'disconnected' and containing a link allegedly providing instructions on how to resolve the issue. This is a phishing attempt. The request should be ignored and marked as spam. 


Proof of payment for outstanding amount

Message with an attachment requiring the recipient to log in to review a 'proof of payment'.   This is a common phishing attempt. The message  should be ignored and marked as spam. 


Hey Future Tuks Graduate ... 

Invitation to students to subscribe to a scheme promising great rewards for students who successfully graduate This looks like a dubious scheme and recipients are strongly advised not to respond. Please mark the email as spam to enable Google to identify the message as such.    


The recipient's address is displayed as the subject

Message to verify the account for some or other reason. A link is provided for sign on to 'revalidate' the account.  This is a phishing attempt. Recipients should never click on links provided or enter their login credentials. Recipients who have responded by logging in using the provided link, should change their passwords immediately. 


Notifications from SARS

During the tax return season fraudulent email notifcations appearing to be from SARS abound. See the SARS website for more information.


Sa-l-ar-y|-fo-rm up~-4036
A short message to review an attached form. The attached form appears to include payroll information, but was not sent from the UP Salary Division. Its purpose may be the distribution of malware or phishing.  


Your mailbox is restricted

Verify email account to release undelivered mail

Action requested to release mail not delivered to the recipients inbox, or to sync content to a quarantined device. These are phishing attempts. Recipients should not click on links provided or enter their login credentials. Recipients who have responded by logging in using the links provided, should change their passwords immediately. 


Did the postman drop anything with you?

Do you have a minute? 

Quick assistance needed please

Request for an urgent EFT payment

An unusual, short and urgent message seemingly from a senior manager to a staff member reporting to them.


Critical security alert

Message from Google that a sign-in attempt to a Google account was blocked

This message could be a legitimate alert from Google or a phishing scam. On receipt, do not use the link provided to check the reported sign-in attempt, but go directly to your Account by clicking on your  photo or logo at the top right of your opened Gmail account.


Multichoice DStv Explora Reference Code Number

Notification of a gift card as a cash-back reward to selected DStv customers


Compromised Wi-Fi router

Cybercriminals may hi-jack your Wi-Fi router or  unauthorised people may use your router and data to browse the Internet   How to secure your Wi-Fi router

Copyright © University of Pretoria 2023. All rights reserved.

COVID-19 Corona Virus South African Resource Portal

To contact the University during the COVID-19 lockdown, please send an email to [email protected]

FAQ's Email Us Virtual Campus Share Cookie Preferences