Phishing emails try to trick you into sharing your password or clicking a harmful link. Some look very convincing.

What they often pretend to be

• The school IT team
• Microsoft 365 alerts, such as "your password is about to expire"
• Document signing requests (DocuSign, Adobe Sign)
• Messages from school staff asking you to act urgently

How to spot them

• Check the sender's full address. School emails come from @harrowhongkong.hk.
• Look for the external warning banner. If an email claims to be from school but Outlook says it came from outside the organisation, it's very likely phishing.
• Be wary of urgency. "Act now" is a common trick.

Your checklist

• Never share your password or sign-in codes. IT will never ask for them by email.
• Don't click links or open attachments you weren't expecting.
• If something feels off, forward it to askit@harrowhongkong.hk before doing anything.

Need help?

Come to the IT Office (Rm L401O, 4/F Learning Lounge) at break or lunch, or email askit@harrowhongkong.hk.