What should I do to avoid missed correspondence?

To avoid missed correspondence, reach out to your contacts to inform them that your U of T email address will be going out of service. Remember to supply an alternative means for them to contact you.

Don’t forget to update your contact information with:

  • People or organizations you correspond with.
  • Subscriptions to newsletters, mailing lists or listservs.
  • Services that provide alerts and notifications (e.g. news, banking or taxes, health and safety alerts).
  • Online logins and accounts (e.g. social media, online shopping, clubs and memberships).

If you wish to open a new email account, there are numerous free and paid email providers to choose from. Examples of free email services include Gmail (from Google), Outlook.com (from Microsoft), or Yahoo! Mail. Home internet providers such as Rogers or Bell may also include email accounts as part of their service packages.

How can I differentiate between legitimate notices from U of T and possible phishing emails?

While the U of T ITS will be sending out legitimate notices to community members regarding their email accounts, it is important to remember that malicious actors often disguise fraudulent emails as email upgrade notices. Please know that U of T will never ask you to divulge your passwords to gain access to any accounts or systems. 

For this reason, legitimate ineligible email shut down notices will always meet the following criteria:   

  • Notices will be sent from a U of T departmental utoronto.ca email address, a U of T listserv or your local IT staff (if applicable).   
  • Notices will indicate which unit or department of the University you can contact for more information.   
  • Notices will NOT ask you to upgrade an eligible email account by:   
    • Responding to an unsolicited email with personal information.   
    • Opening an email attachment.   
    • Clicking on a button embedded in an email, or a link in an email that conceals its destination (such as links that say “click here “).
    • Sending a text/SMS message.  

 

If you receive a notice that does not meet these criteria, do not respond to it or click on any links it contains. Forward it on to the Information Security team at report.phishing@utoronto.ca and then delete the email. 

Reminder: The University of Toronto will never ask you to divulge your passwords to its staff to access systems. 

For more information on phishing and protecting yourself online, please see Information Security’s Security Matters website. 

How doe the anti-impersonation feature work?

The anti-impersonation feature uses artificial intelligence to distinguish between messages from legitimate senders and impersonated senders. This feature also checks emails originating from non-U of T email addresses against a pre-defined list of display names belonging to senior leaders at U of T. This means that if someone attempts to impersonate a senior leader by spoofing/using their name or email address to contact U of T recipients, the scam email will be sent directly to users’ junk folders.

To learn more about the anti-impersonation feature, please review the article Secure U of T advanced threat protections: anti-phishing protection.