Anti-Phish Tutorial

BlueLight Internet Security Commitment

At BlueLight Internet, we are committed to protecting your privacy and security. We will never request sensitive information from you via email. Sensitive information includes credit card number, bank account information, personal information, social security number, member ID, or password. We strongly suggest that you do not share your password (and PIN) with anyone.

If BlueLight Internet requests information from you via email, we will always direct you back to the BlueLight Internet account site located at http://account.mybluelight.com/s/account

If you have received email requesting that you provide personal information and you believe it was not sent by BlueLight Internet, please forward it to abuse@support.mybluelight.com so that our security team can investigate. Please refer to the following information to help you spot fraudulent email.

What is Phishing or Spoofing?

"Phishing" or "Spoofing" emails are made to look like they are sent from reputable companies but are actually sent by cyber-criminals. These types of emails are sent to trick consumers into divulging sensitive information so that unlawful charges can be made on the consumers' accounts. Responding to "phishing" or "spoofing" emails will put your accounts and personal information at risk; they will link you to an imitation copy of a legitimate web page to trick you into providing sensitive personal information.

Identifying a Phish or Spoof Email

Phishing emails will usually urge you to "update" or "validate" your account information and will often threaten some dire consequence for not responding to them.

Be on the lookout for poor grammar or typographical errors. Many phishing emails are translated from other languages or are sent without being proofread, and as a result may contain bad grammar or typographical errors.

Is the email from BlueLight Internet? While cyber-criminals may send forged email to make it look like it came from BlueLight Internet, you can determine whether or not it's authentic by making sure the return address is from @support.mybluelight.com. If the "from" line of the email looks like "bluelight-security@abc.com" or "bluelight-fraud@xyz.com," or contains the name of another Internet service provider, besides BlueLight Internet, you can be sure it's a fraudulent email.

What do I do if I get a Phishing Email?

If you get an email that asks for sensitive information, do not reply or click on the link in the message. BlueLight Internet does not collect this information via email.

When possible, you should avoid clicking links in the email. Instead of clicking the link, type the URL into the address area of your Internet browser. At no time should you cut and paste the link included in the message.

While BlueLight Internet does send email that contains links, the links are provided for convenience only. If you are concerned about your account, open a new Internet browser session and type http://account.mybluelight.com or http://account.mybluelight.com/s/account in your Internet browser address area to take you to the BlueLight Internet account pages so you can view your account information safely.

Be sure you are on a BlueLight Internet web page

Before signing in to your account, please check the URL in your browser. If you click on a link in an email, verify that the URL in your browser is the same as the URL shown in the email. The URL of BlueLight Internet sign-in pages always begins with http://www.mybluelight.com/ or http://webmail.mybluelight.com

Never type your BlueLight Internet member ID and password into a web page that doesn't have 'mybluelight.com' immediately before the first forward slash (/).

Examples of:

		Fake BlueLight Internet URLs:  http://support.mybluelight.com@10.19.32.4/  http://support-mybluelight.com/			Real BlueLight Internet URLs:  http://www.mybluelight.com/support/  http://account.mybluelight.com/s/account  http://webmail.mybluelight.com

Sometimes the fake email will list a legitimate BlueLight Internet link but will not match up with the URL of the site it finally takes you to. Before providing any personal information type www.mybluelight.com in your browser address bar and sign-in to your account.

How to Report a Possible Phishing Scam or Other Fraud

If you receive an unsolicited email from BlueLight Internet requesting personal information, please forward the message and its full headers to abuse@support.mybluelight.com. We take member security very seriously and work with law enforcement agencies to stop cyber-criminals. By reporting potential scams, you will be protecting yourself and other members from being defrauded.

What Should I do if I Have Become a Victim of Fraud?

If you have responded to a scam message and given out your details, you should report it immediately. If you have given out your BlueLight Internet account details, please write to abuse@support.mybluelight.com.

If you have given out any bank or credit card information, you should contact those companies as well.

To learn more about what to do if you have given out your personal financial information, please visit APWG's Consumer Advice page or Federal Trade Commission - ID Theft.

Common Sense Security Practices

Always keep your password secure. Never share your password with anyone.

Always review your credit card and bank account statements as soon as you receive them to determine whether there are any unauthorized charges. If your credit card or bank statement is late by more than a couple of days, call your credit card company or bank to confirm your billing address and account balances.