JISC Legal has today received a phishing email purporting to be from a student finance company. Phishing emails are designed to steal personal data. They are unsolicited and will prompt you to supply personal information either in replying to the email, or direct you to another website where you will be asked to provide personal data. It is that time of year again when students are sorting out their finances and perhaps more vulnerable than usual to being taken in by a request for their financial details in order to access a loan. Institutions might want to alert students and staff as to the existence of such emails and to be aware of the risk of unauthorised access to their bank accounts if the requested information is disclosed.