There is nothing that keeps someone from forging the return address on an Email. In fact, it’s no more difficult than writing a false return address in the corner of an envelope before dropping it in a mailbox. Just because an address ends in “@canisius.edu” doesn’t mean that someone at Canisius actually wrote it. If something seems truly odd about a message, don’t take it at face value; instead, call the person on the phone and ask if they sent it to you.
Submitted by: Matthew Gracie, information security administrator, ITS
