Understanding Spam, Phishing, and Junk Email

Questions

  • How do I know if an email is a phishing attempt?
  • What should I do if I receive a suspicious email?
  • What is the difference between spam, junk, and phishing email?
  • What do I do if I clicked a link in a phishing email?
  • How do I unsubscribe from bulk marketing emails?
  • How does Bowdoin protect me from spam and phishing?
  • I think I fell for a phishing scam — what do I do now?

Environment

This article applies to all current Bowdoin students, faculty, and staff.

  • Email client: Microsoft Outlook (any version) with a Bowdoin Microsoft 365 account
  • Related: Microsoft 365 filters most malicious email before it reaches your inbox — see Microsoft 365 (M365) Email Protection in the Related Articles section for how that works

Resolution

Types of unwanted email

Not all unwanted email is the same. Understanding the type helps you know how to respond:

  • Phishing emails are fraudulent messages designed to trick you into revealing login credentials, personal information, or clicking malicious links. They often impersonate trusted organizations — banks, IT departments, Microsoft, Bowdoin — and may contain urgent language or threats.
  • Bulk / marketing emails are messages sent to large lists, often by companies or organizations you may have signed up with at some point. These are not malicious but can be unwanted. They are required by law to include an unsubscribe link.
  • Spam is unsolicited email that is generally irrelevant or low-quality. Most spam is caught automatically by Microsoft 365 and delivered to your Junk folder or quarantine before you see it.

How to identify a phishing email

Phishing emails can be sophisticated, but look for these warning signs:

  • Mismatched sender address: The display name says "Bowdoin IT" but the actual email address ends in a domain like @random-domain.net.
  • Urgency or threats: "Your account will be deleted in 24 hours," "Immediate action required," or similar pressure tactics.
  • Generic greetings: "Dear Valued User" instead of your name.
  • Unexpected requests: Being asked to provide your password, click a link to "verify" your account, or open an unexpected attachment.
  • Grammar and spelling errors: Legitimate communications from Bowdoin and reputable organizations are carefully written.
  • Suspicious links: Hover over links before clicking — the destination URL shown in the bottom of your browser should match where you expect to go.
When in doubt, do not click. If you are unsure whether an email is legitimate, do not click any links or open any attachments. Contact the sender through a known, trusted channel — look up their phone number or official website independently rather than using contact details from the email itself.

What to do if you receive a suspicious email

  1. Do not click any links or open any attachments.
  2. Use the Report button in Outlook to report the message to Microsoft and Bowdoin IT. See Reporting a Phish or Spam email in the Related Articles section for step-by-step instructions.
  3. If you are unsure, forward the message to servicedesk@bowdoin.edu and ask IT to take a look before interacting with it.

What to do if you think you've been phished

If you clicked a link, entered credentials, or otherwise interacted with what you believe was a phishing email:

  1. Change your Bowdoin password immediately at login.bowdoin.edu.
  2. Contact the IT Service Desk right away at (207) 725-3030 or servicedesk@bowdoin.edu. Time matters — the sooner IT is notified, the more effectively they can respond.

Managing bulk and marketing emails

  • Unsubscribe: Look for the unsubscribe link at the bottom of bulk emails and follow the instructions. This is the cleanest solution for legitimate mailing lists.
  • Block the sender: In Outlook, right-click the message and select Block > Block Sender to send future messages from that address directly to junk.
  • Create a rule: Outlook rules can automatically move, delete, or categorize messages from specific senders. See Outlook's help documentation for instructions on creating rules.

Additional Help

If you need further assistance, you have several options:

  • Bowdoin Bot: Chat with Bowdoin Bot directly from any KB page for instant answers.
  • Phone: Call the Bowdoin College Service Desk at (207) 725-3030.
  • In person: Visit the Tech Hub in Smith Union during business hours.
  • Submit a ticket: Request assistance through the Service Catalog.
Print Article

Related Articles (5)

Junk Mail Folder
Explains what the Junk Mail folder is in Microsoft Outlook, how messages end up there, and how to check and manage it in Outlook Online and Outlook for Windows.
Manage Junk Email Settings
How to configure safe senders and blocked senders in Outlook Online to control which email goes to your junk folder, including how to allow entire domains or block specific senders.
Microsoft 365 (M365) Email Protection
Explains the two layers of Microsoft 365 email protection at Bowdoin — Exchange Online Protection (EOP) and Microsoft Defender for Office 365. Covers how spam, phishing, malware, and suspicious links are filtered, what users will see when protection is active, and what to do if a legitimate message is blocked.
Release Quarantined Email
How to review and release email messages that have been blocked by the Microsoft 365 spam filter and placed in quarantine, either from the quarantine notification email or directly from the Microsoft quarantine portal.
Reporting a Phish or Spam email
How to report a suspected phishing or spam email to Bowdoin IT using the Report Message option in Microsoft Outlook. Covers Outlook for macOS, Outlook Online, Outlook for Windows, and Outlook for iOS/iPadOS. No need to forward emails to IT directly.