Best Practices to Prevent Phishing and Social Engineering for Subcontractors

Phishing emails and phone calls attempt to trick you into divulging sensitive information or installing malware. Criminals use phishing to infiltrate a company and steal money, identity information, and confidential data. Phishing emails often look like real and legitimate messages, except that links in the email direct you to a fake website that closely resembles the real website.

It is important to recognize a phishing attempt and know how to react. Phishing attempts will often:

Contain obvious grammatical and spelling errors
Make claims that are hard to believe, such as stating you won something
Ask you to submit sensitive personal, financial, or business information
Push you to act quickly due to an implied threat, pending deadline, or legal action
Direct you to select a link as its sole purpose.

Tips to protect yourself from phishing attempts:

Never use email to send sensitive or personal information, such as your user name, account numbers, passwords, verification codes, or identification number. Legitimate companies will not use email to ask you for sensitive information. For urgent matters, call the sender directly, using a verified phone number such as a customer service number.
Never select links or respond to an email unless you are absolutely sure the email is legitimate. Always hover the cursor over a link to check the actual target URL.
There is no legitimate reason why another user of Oracle Textura Payment Management would request your password or a verification code sent to your phone. Any requests from someone claiming to be an Oracle Textura Payment Management user asking for your password or a phone verification code are likely phishing attempts.
Oracle will never contact you to request your password or to confirm a verification code sent to your phone.
You should only receive verification codes from Oracle Textura Payment Management when you request them on the site. Receiving a verification code that you did not request may be a phishing attempt.

If you are uncertain whether an email or verification code is legitimate please contact Oracle Support at 1-(866) 839-8872.

Next: Security Center for Subcontractors