🎣 Report a Phishing or Suspicious Email
How to recognise a scam message, report it safely, and what to do if you already replied or clicked.
✅ Before You Begin
- You need access to your NEO mailbox
- Do not forward a suspicious message to colleagues to ask what they think — that spreads it
- 🕐 Estimated time: 2 minutes
👁️ How to Spot a Suspicious Message
🕐 ~2 minutes | Any mail app
- It creates urgency. Your account will be closed today, your paycheque is on hold, respond within the hour.
- It asks for your password, a verification code, or your bank details. NEO IT will never ask you for your password — not by email, not by phone.
- The reply address does not match the sender. Click the sender name and read the actual address.
- It offers a job that is too good to be true. Fake job and personal-assistant offers target student addresses in particular.
- It asks you to buy gift cards or move money, often while claiming to be a supervisor who is stuck in a meeting.
- The greeting is generic or your name is spelled oddly, and the writing is slightly off.
⚠️ Note: A message can come from a genuine NEO address and still be an attack. If a colleague's account is compromised, their real address sends the scam. Judge the request, not just the sender.
📣 Report It
🕐 ~1 minute | Outlook
- Select the message in your mailbox. Do not open attachments and do not click links inside it.
- Use the Report option on the Outlook toolbar and choose the phishing option. If you cannot find it, go to the next step instead — reporting by email is just as good.
- If there is no Report option, forward the message to neosupport@neo.edu and say that you believe it is phishing.
- Delete the message once you have reported it.
💡 Tip: You will never be in trouble for reporting a message that turns out to be legitimate. Reporting a real message costs a minute; not reporting a fake one can cost far more.
🚨 If You Already Clicked or Replied
🕐 Do this now | Time matters
🚨 Warning: If you typed your password into a page you reached from an email, treat the account as compromised and change the password straight away. Every minute counts, and mail rules an attacker adds can keep them in your account after the password changes.
- Change your NEO password immediately — see Reset a Forgotten NEO Password.
- Call the IT Help Desk on (918) 540-6099 and tell them what happened. Do this even if you have already changed the password.
- Check your mailbox for forwarding rules you did not create. Attackers add these to keep reading your mail.
- If you entered bank or card details, contact your bank as well.
- If it happened on a campus computer, stop using that machine and tell IT which one it is.
⚠️ Note: Tell us even if you are embarrassed. These messages are designed by professionals to fool careful people, and the only thing that makes it worse is delay.
📞 Still Need Help?
If you encounter any issues not covered in this guide, please contact the NEO A&M College IT Help Desk:
🌐 Helpdesk Portal: support.neo.edu
📞 Phone: (918) 540-6099
📧 Email: neosupport@neo.edu
📍 Walk-in: I.T. Services, Library/Administration Building, 2nd Floor, Room 216
🕐 Hours: Monday – Friday, 8:00 AM – 5:00 PM