Keeping your information secure

You probably need a password for each of your online accounts and it's tempting to use the same (or similar) passwords for multiple profiles. But this isn't as safe as you might think. 

Using the same password in multiple places is asking for trouble – if a scammer gets access to one of your accounts they'll quickly be able to access others.

You should use strong passwords to keep your accounts and information protected.

Protect yourself from someone accessing your account without your permission by:

• using capital letters, numbers and special characters (such as an exclamation mark or hash) in your passwords
• making your password at least eight characters long
• not using the same password for multiple logins
• avoiding your username, real name or company name
• paying attention to what websites you're typing passwords and personal details into
• Using 2-step verification through your phone where possible
• Using a pin or fingerprint to unlock devices

Password generators

A password generator can create long, randomised passwords for you to use.

Online password generators automatically create a secure, random password.

Some browsers offer in-built password generation options — or you can download extensions that will do this for you. Just remember to make a note of the generated passwords if you're not using a password manager. 

Password managers

Password managers work by saving your account passwords and filling in your credentials for you when you want to log in to a website. They're often a good way of balancing convenience and security.

If there is a security breach on a site that holds your data, many password managers will alert you if your password has been compromised and offer to change it for you (depending on the service and platform you use).

You should always check that a password manager is trustworthy, such as checking reviews, before using it. Things to be aware of are how they store and use your data, what happens if there is a breach, and if they pass any of your personal information onto third-parties. 

Install security and antivirus software

Security and antivirus software is one of the most important ways you can keep your computer protected. Without security and antivirus software, you leave your device open to malware and adware, which can install unwanted software on your browser or computer.

Security and antivirus software can protect you from most malicious software and potential hacking threats. But you still need to be mindful of what you're accessing when online.

Virtual private networks

Using a Virtual Private Network (VPN) is a great way to stay better protected online. It creates a secure, encrypted connection to the internet that masks your device's identity and location.

It's handy if you regularly access public WiFi networks at coffee shops or use your card online. You will need to use the University's VPN to access many of our services.

Some of the ways online accounts are compromised:

• Data breach – your account details are stolen from a server
• Phishing attack – a spoof email/phone call asks you for your login details
• Social engineering – someone pretends to be you and requests information about your account from a third party
• Brute force attack – someone tried many different passwords until they guess the correct one 

To stay secure, make sure you:

• Your antivirus and malware software is up-to-date and run regular scans on all devices
• Never share your login information or personal information (such as birthdate, home address, etc) 
• Have complex and unique passwords for all your accounts
• Always remember that if something looks suspicious, it's best not to click it

Tuition fee payments

We do not offer incentives or discounts for payments through a third party (someone - either an entity or individual - outside of the university setting). We strongly advise that payments for your fees are either made by yourself or an immediate trustworthy member of family. If you make a fake or fraudulent payment, even unknowingly, the University will hold you responsible and could de-register you from your course.

A third party may offer to process your fees and pass your money on to the University, sometimes offering incentives, discounts of attractive exchange rates to tempt to you send them your money. Sometimes they'll even send you a receipt showing the full payment made, but it's likely this is faked. Instead they steal your cash and don’t pay your fees.

You should only ever pay the University directly through the official ways to pay. If in doubt, or if you have any questions about paying your fees, contact our friendly Income team directly via [email protected], or by calling 023 9284 5533 Monday to Thursday between 10.00am and 4.00pm or Fridays between 10.00am and 3.00pm. 

Essay mill blackmailers

An essay mill is an individual or company who will offer to do your university work for money. This is already against the University of Portsmouth's policies and you will be placed under academic misconduct review when discovered.

However, a lot of these companies offer to write assessments for payment and then try to blackmail you, threatening to report you to the University. This means you're out of even more money, with nothing to show for it, and potentially at risk of loosing your place at uni.  

If at any point you need more support with your assessments, contact your lecturers or Personal Tutor for advice, or get help from teams like the Academic Skills Unit. If you’re being threatened with blackmail, seek confidential support from the Students' Union and Student Wellbeing and block any direct communications from contract cheating companies.

Money muling or money laundering

Students are offered payment in exchange for receiving money into their account to then transfer it to another account. Money laundering is a serious criminal offence and if the University is informed of, or suspects, fraudulent payment activity, we will take appropriate action. Don't be tempted by promises of 'easy money' online.

Scammers posing as University staff

Some students have been approached by callers who claim to be from their university's Finance team, telling them they've been a victim of bank fraud, and trying to get personal information and money. If you get a similar call, do not give any details or make any payments over the phone. Instead hang up, and call the Student Money team directly for advice.

Common scams targeting international students

UKVI contact

This is where someone claiming to be a real organisation, such as the Home Office/UKVI or HMRC, contact you and tell you that you need to pay a fine because you have broken rules or not followed guidelines. These organisations would not contact you in this way and would not ask you to pay any money to them. The fraudsters may be calling you from what looks like a genuine number.

Do not give them any personal information or make any payments to them. Ask for a number to call back and check it online against official government websites. For further information and advice on what to do please visit the UKCISA website.

What is phishing

Phishing is a cybercrime in which an attacker tries to gain valuable information by disguising emails, instant messages or other communications. Often they will pretend to be a trusted source, such as a friend, family member, workplace or even from the University.

Cyber criminals aim to fool you into handing over valuable information such as passwords, PIN numbers and account numbers. They may also demand money from you to release information valuable to you (such as your University work, or photo/video library).

Once an individual falls for a phishing scam, usually by clicking on a fraudulent link, hackers will install malicious software or steal personal information from their computer. 

Phishing targeting students

Students have been targeted with phishing emails relating to academic misconduct.

The University will only ever contact you about an academic misconduct issue via your university email account. 

How to check if an email is a scam

Some are more subtle than others, but here are things you can do to check if it's a phishing email:

• Check the sender’s email address - does it look like it’s come from a valid email address of someone you know?
• Check for spelling and grammar errors — most phishing emails contain spelling mistakes and/or bad grammar.
• If you are not expecting the email and there is a link or an attachment, do not click on the link or download the attachment.
• The greeting is probably impersonal, such as 'Dear Student'