Do not trust the display name alone. At the University of New Haven, emails ending in @unh.newhaven.edu are student accounts, while @newhaven.edu addresses are for faculty, staff, and administrative offices. While official offices may occasionally require information to verify your identity, they will only do so via @newhaven.edu addresses. You should never provide personal or account details to a student (@unh.newhaven.edu) account or any external domain.

Be aware that phishing attempts can sometimes originate from legitimate @newhaven.edu addresses if an employee's account has been compromised. Even if the sender's email address is correct, stay alert if the content of the message is unexpected, contains unusual links, or seems out of character for that individual.

Be wary of unexpected text messages containing links or asking for immediate action regarding your university status. Official university emergency alerts will never ask you to click a link to "log in" or "validate" your account via text. The University will never text you and ask for any personal information, including your authenticator code.

Attackers use alarming language to create a sense of urgency. If a message makes you uneasy or seems "too good to be true" (like an unsolicited job offer or unexpected grant), do not interact with it. It is always safer to pause and verify through official channels.

Official account-related notifications will only come from studenttechsupport@newhaven.edu. The University will never ask for your password via email or any other form of communication. Never share your password or approve a multi‑factor authentication (MFA) request that you did not personally initiate.