Happy 2026! A look back at phishing and scams in 2025

Posted on Categories Phishing, Spam

Many Email Scams in 2025

With so many retrospectives on 2025 being published, this seems like the time to look back on the increased number of phishing attacks or money scams targeting the campus this past year. We had so many more scams in 2025 than I’ve ever seen in my 25 years at Augsburg. Here’s some reminders of scams I remember.

Red Flags

With all of these scams, there are several red flags to look for. Keep in mind that no single red flag is definite that something is a scam. But if the flags are adding up that should increase your suspicion. Some examples are

  • A deal that seems too good to be true. It often is fake.
  • A deal that is unexpected or not the norm. There is a classifieds section of amail for selling things. 
  • A deal that wants payment through an app or bank transfer or text.
  • People or names of departments are referenced that are not recognized.
  • Language that sounds a little off.
  • A sense of urgency requiring your action quickly.
  • A From email address that is outside of Augsburg.

With all of these red flags, there are ways for scammers to seem legitimate.

  • With AI and information on our website, scammers can write emails that sound quite real and reference real people.
  • With phishing attacks, a phishing victim’s account can be used by a scammer to send more emails adding to the look of legitimacy.

What should I do if I get scammed?

  • If money is involved, the FTC has some recommendations to try to get it back. 
  • If you entered your password on any form or strange looking website, immediately change it on Inside Augsburg. Never approve any Duo pushes you weren’t expecting or have a strange location
  • If you started texting with the scammer, block the number.
  • Mark the scam email as spam or phishing to train Google. Many scams are now going straight to spam and not reaching your InBox.
  • Students can contact the Tech Desk for help. Faculty and Staff can contact their LFC.

Disabled Accounts

Keep in mind that if we detect or if Google detects that your account has been compromised from a phish we will disable your account as quickly as we can to prevent more phishing or scam emails. What you’ll experience is that you are suddenly signed out of your account and your password doesn’t work. You’ll need to contact us (Tech Desk or LFCs) to regain access to your account. We will verify your identity before unlocking the account.

General Advice

The most general advice I can give you is slow down, read something more than once, and let it sit before acting.  Trust your gut – if something smells phishy it likely is a scam or phish.