What Attackers Know About Registration Week

Course registration is a busy and sometimes stressful time—and cybercriminals know it. When students are rushing to secure classes, checking waitlists, or resolving registration holds, attackers take advantage of the urgency by sending convincing phishing emails.

These scams often impersonate university offices such as the Registrar, Financial Aid, IT, or Academic Advising. Taking a moment to pause before clicking can help protect your account and personal information.

Why Registration Season Is Targeted

Attackers rely on timing. When people expect important emails about schedules, holds, or account access, they are more likely to click quickly without double-checking.

Common scam messages during registration include:

• Claims that there is a problem with your registration

• Alerts saying your account will be locked

• Requests to confirm your student record

• Links to “fix” a registration hold

• Messages about tuition payment issues

These emails may include university logos or familiar language to appear legitimate.

Common Red Flags

Even convincing phishing emails usually contain warning signs. Watch for:

• Urgent language (“Act now or your registration will be cancelled”)

• Requests for passwords or verification codes

• Links to unfamiliar websites

• Emails from external or unusual addresses

• Poor grammar or formatting

If a message feels rushed or alarming, that’s often intentional.

Protect Your Account During Registration

A few simple habits can help keep your account secure:

• Access registration systems through official Montclair websites or bookmarks

• Avoid clicking links in emails asking you to “fix” account problems

• Use Duo Push through the Duo Mobile app to approve login requests

• Never share your NetID password or Duo verification codes

• Report suspicious emails using the Phish Alert Button (PAB)

A Reminder for Faculty and Staff

Faculty and staff may also receive phishing messages related to registration, advising, or student records. Attackers sometimes impersonate students or university offices in an attempt to access sensitive systems or information.

Be cautious of emails requesting:

• Registration overrides or enrollment changes

• Student record updates

• Account verification

• Urgent requests that bypass normal processes

If a request seems unusual, verify it through official university channels before taking action.

Example: A Common Registration Scam

A faculty member receives an email that appears to come from a student asking for help registering for a required course. The message may request a quick registration override or ask the professor to review an attached form.

In some cases, these emails come from compromised student accounts, which can make them appear legitimate.

However, the message may include:

• A link to a fake login page

• An attachment designed to steal credentials

• A request to bypass normal procedures

Before responding, verify the request through official university systems or by contacting the student directly.

When in Doubt, Go Directly to the Source

If you receive a message about registration, holds, or your account, go directly to the official Montclair website or contact the office through the campus directory rather than using links in the email.

Want to Know More?

Montclair State University | Registration

Montclair State University | Registration: Seamless Login & Waiting Room Feature

Montclair State University | Red Hawk Central

Montclair State University | How to Register for Classes

Montclair State University | How to Guides