University of Vermont

Information Technology

Don't Open Attachment in "Restore your account" Scam Email

Email with a Subject of "Restore your account" is a phishing scam -- an attempt to steal your UVM credentials (your Net-ID and password).   Please do not click on the link in the message, and don't reply to it; simply delete the email.  

Never open an attachment you were not expecting.  Even if it appears to be from someone you know, contact the sender to confirm he or she intended to send you an attachment, since scammers and criminals use attachments as a means of infecting recipients' computers with malicious software.  

What to do if you've opened the attachment

If you've opened the attachment in the message, and if you have entered information into a form that appeared after clicking on the attachment, you should change your password immediately at  Scan your computer for malicious software.  Contact the UVM Computing Helpline if you need assistance.

For more information about phishing scams, view our Web page on protecting your NetID and password

If you are ever uncertain about the legitimacy of an email message concerning your account, please contact the Computing Help Line at 656-2604, or submit a help request online.

If you would like to report phishing, please forward the phishing email, as an attachment, to and to (To forward a message as an attachment using Thunderbird, go to the Message menu and select Forward As > Attachment.)

The "Restore your account" Phishing Scam

The link in this message would take you to a malicious non-UVM site.

From:    GlobalPay
Date:    Fri, 07 Feb 2014 05:58:25 -0500
Subject:    Restore your account

Dear customer,

We regret to inform you that your account has been restricted.
To continue using our services plese download the file attached to this e-mail and update your login information.

© GlobalPaymentsInc
Malicious Attachment





Contact UVM © 2018 The University of Vermont - Burlington, VT 05405 - (802) 656-3131