Help! I Have Been Phished!

If you have exposed your personal information to a phishing scam, you must take immediate steps to report the incident and secure your financial identity based on the specific data revealed.

Immediate Reporting Contacts

Your first step is to report the message to the appropriate authorities. If the phishing attempt was directed to your university account, contact OIT Cybersecurity at 612.343.4170 or incident@northcentral.edu. If you believe you are a victim of fraud or identity theft, notify your local police jurisdiction immediately and stop all contact with the suspect organization.

Exposed NCU Passwords

If your university credentials were revealed:

Bank or Credit Card Exposure

If you revealed account numbers, passwords, or PINs:

  • Call the Hotline: Use the number on the back of your bank card to report the incident.
  • Report Money Transfers: If you sent money to a scammer, notify your local police.
  • Inspect Statements: Review your records carefully for any signs of account misuse.
  • Bank Guidance: Check your bank's website for their specific fraud and identity theft protocols.

Securing Your Credit and Identity

Top Priority: The Big Three

Action: Place a freeze on your credit reports at all three major bureaus. This blocks the creation of new accounts by preventing organizations from checking your credit without permission.

Secondary: Minor Bureaus

Innovis & NCTUE

Action: Go the extra mile by freezing your credit at Innovis (866-712-4546) and the National Consumer Telecom & Utilities Exchange (866-349-5355).

Protecting Your Social Security Number

If sensitive data like your SSN, date of birth, or mother's maiden name was exposed, you must involve national consumer protection agencies.

National Resources and Support

The following agencies provide expert guidance for dealing with identity theft and internet fraud:

Print Article

Related Articles (4)

Learn how to update your NCU password that manages your university applications, network, email, and Canvas accounts.
Phishing attacks and other email scams take advantage of personal and professional relationships, organizational hierarchies, and human curiosities — information that is now readily available through social media and professional networking websites.
Although your first instinct may be to ignore or delete suspicious emails, we recommend that you report them to our security team. IT will examine the email and advise you of any further steps you may need to take.
A compromised account is one accessed by a person not authorized to use the account.

Related Services / Offerings (2)

If you suspect that your account has been compromised, report it immediately to IT.  IT will work with you to reset your password, restore access to your account, and investigate the impact of the incident.
If you suspect a potential security issue involving any private information—whether the information is on a computer, on paper, on the web, etc.—immediately report the details to IT.