Anti-Phish Tutorial

Juno Security Commitment

At Juno, we are committed to protecting your privacy and security. We will never request sensitive information from you via email. Sensitive information includes credit card number, bank account information, personal information, social security number, member ID, or password. We strongly suggest that you do not share your password (and PIN) with anyone.

If Juno requests information from you via email, we will always direct you back to the Juno account site located at http://account.juno.com/s/account

If you have received email requesting that you provide personal information and you believe it was not sent by Juno, please forward it to abuse@support.juno.com so that our security team can investigate. Please refer to the following information to help you spot fraudulent email.

What is Phishing or Spoofing?

"Phishing" or "Spoofing" emails are made to look like they are sent from reputable companies but are actually sent by cyber-criminals. These types of emails are sent to trick consumers into divulging sensitive information so that unlawful charges can be made on the consumers' accounts. Responding to "phishing" or "spoofing" emails will put your accounts and personal information at risk; they will link you to an imitation copy of a legitimate web page to trick you into providing sensitive personal information.

Identifying a Phish or Spoof Email

Phishing emails will usually urge you to "update" or "validate" your account information and will often threaten some dire consequence for not responding to them.

Be on the lookout for poor grammar or typographical errors. Many phishing emails are translated from other languages or are sent without being proofread, and as a result may contain bad grammar or typographical errors.

Is the email from Juno? While cyber-criminals may send forged email to make it look like it came from Juno, you can determine whether or not it's authentic by making sure the return address is from @support.juno.com. If the "from" line of the email looks like "juno-security@abc.com" or "juno-fraud@xyz.com," or contains the name of another Internet service provider, besides Juno, you can be sure it's a fraudulent email.

If you are using Email on the Web, all emails sent from Juno will have a small Juno icon next to them, instead of the envelope icon, as highlighted in the picture below. This will mean that the email is authentic and can be trusted. If an email claiming to be sent from Juno but it does not have the Juno icon, it may be a scam. Please forward the mail with its full headers to abuse@support.juno.com for verification/reporting the scam

What do I do if I get a Phishing Email?

If you get an email that asks for sensitive information, do not reply or click on the link in the message. Juno does not collect this information via email.

When possible, you should avoid clicking links in the email. Instead of clicking the link, type the URL into the address area of your Internet browser. At no time should you cut and paste the link included in the message.

While Juno does send email that contains links, the links are provided for convenience only. If you are concerned about your account, open a new Internet browser session and type http://account.juno.com or http://account.juno.com/s/account in your Internet browser address area to take you to the Juno account pages so you can view your account information safely.

Be sure you are on a Juno web page

Before signing in to your account, please check the URL in your browser. If you click on a link in an email, verify that the URL in your browser is the same as the URL shown in the email. The URL of Juno sign-in pages always begins with http://my.juno.com/ or http://webmail.juno.com

Never type your Juno member ID and password into a web page that doesn't have 'juno.com' immediately before the first forward slash (/).

Examples of:

		Fake Juno URLs:  http://support.juno.com@10.19.32.4/  http://support-juno.com/			Real Juno URLs:  http://www.juno.com/support/  http://account.juno.com/s/account  http://webmail.juno.com

Sometimes the fake email will list a legitimate Juno link but will not match up with the URL of the site it finally takes you to. Before providing any personal information type www.juno.com in your browser address bar and sign-in to your account.

How to Report a Possible Phishing Scam or Other Fraud

If you receive an unsolicited email from Juno requesting personal information, please forward the message and its full headers to abuse@support.juno.com. We take member security very seriously and work with law enforcement agencies to stop cyber-criminals. By reporting potential scams, you will be protecting yourself and other members from being defrauded.

What Should I do if I Have Become a Victim of Fraud?

If you have responded to a scam message and given out your details, you should report it immediately. If you have given out your Juno account details, please write to abuse@support.juno.com.

If you have given out any bank or credit card information, you should contact those companies as well.

To learn more about what to do if you have given out your personal financial information, please visit APWG's Consumer Advice page or Federal Trade Commission - ID Theft.

Common Sense Security Practices

Always keep your password secure. Never share your password with anyone.

Always review your credit card and bank account statements as soon as you receive them to determine whether there are any unauthorized charges. If your credit card or bank statement is late by more than a couple of days, call your credit card company or bank to confirm your billing address and account balances.