FAQ | Frequently Asked Questions

brought to you by your friendly
UC Davis Geology Department Computing Support Team

Q: I received a message about my e-mail quota/virus/expiration/etc… Is this e-mail warning valid? or is it phishing?
A: You've received a message similar to this snippet and want to know if it is legitimate.

From: Web service Administrator <info@desk.org>
Date: October 5, 2012 1:54:44 AM PDT
To: undisclosed-recipients:;
Subject: Help Desk, Faculty/Staff/Student/Employee/Admin Warning!!!

You have reached the limit of your mailbox by your web mail service,
...

Please click on the link below to upgrade your Quota

https://docs.google.com/spreadsheet/viewform?formkey=blahblahblah

----------------------------------------------------------------
FME Webmail
www.educacao.niteroi.rj.gov.br

The short answer is that the message above is a phishing e-mail.

The campus IT Helpdesk recommends the following:

This type of phishing utilizes a webform hosted offsite. Unfortunately, as anyone can easily create a form online there is no way to prevent them.

In order to help ensure active webforms are shut down quickly, you may report them to the following authorities:
  1. If it is Google docs or similar webform, use their google-settings-gear Settings→Report an issue link on the page

  2. Use Firefox’s Help→Report Web Forgery… item or Chrome’s Help→Report an Issue… item to report the phishing.
Please note, if you open the webform, DO NOT fill in your information.

For more information on protecting yourself, please visit the following site:

http://security.ucdavis.edu/antiphishing.cfm

Listed below are some clues to help you determine if a message is valid. A legitimate over-quota message from the UC Davis campus looks like this:

From: "IT-Help" <ithelp@ucdavis.edu>
Date: January 3, 2011 5:01:21 AM PST
To: Over quota mail user <YourMailID@ucdavis.edu>
Subject: Over quota mailbox

WARNING: Your alloted disk space for your UC Davis email account is nearly or completely full. You must delete or move some of your mail from your inbox and/or other folders before you can receive any more mail. If you need additional assistance you may contact IT Express at 530-754-4357.

To determine your mail disk usage, see
http://dc.ucdavis.edu/info/diskquota.php

This message was automatically appended to your mail box on 01/03/2011 05:01:21 AM. You may have removed mail from your inbox since then; if so, it is possible this message no longer applies.

A legitimate campus e-mail warning will contain the following features:.

  1. The From: header contains the name and address of the UC Davis campus Help Desk:

    From: "IT-Help" <ithelp@ucdavis.edu>


  2. The To: header will contain your actual campus MailID, (not To: undisclosed-recipients:;) and be similar to:

    To: Over quota mail user <YourMailID@ucdavis.edu>


  3. The body of the message will contain a UC Davis campus phone number where you can get assistance.

    If you need additional assistance you may contact IT Express at 530-754-4357.


  4. The body of the message will contain a link to a UC Davis campus web page where you can check your email quota WITHOUT requiring your username or password:

    To determine your mail disk usage, see http://dc.ucdavis.edu/info/diskquota.php


  5. The message will never ask you to send your username and password to anyone.

Additional information about phishing messages can be found on the campus Security website at http://security.ucdavis.edu/antiphishing.cfm