Cybersecurity Contests for Students

You’re considered an eligible student for the phishing contest if you’re enrolled in at least one course for the spring/summer 2023, fall 2023 or winter 2024 terms.

Throughout Cybersecurity Awareness Month in October, all eligible students will be sent fake phishing emails. To participate in the contest, you’ll need to:

1. Report at least three fake phish to spamrec@torontomu.ca using the “forward” function in your email (please do not use the “forward as attachment” option); and
2. Avoid clicking the malicious link in more than two of our fake phish.

TMU receives a number of malicious or phishing emails each day that are designed to deceive you into giving away data like your TMU username and password, credit card number or bank account details. 

Many phishing emails include common traits that can make them easy to catch once you learn what they are.

Even though these emails are coming from TMU Computing and Communications Services (CCS), the goal is for you to identify the email and not respond by clicking a link or opening an attachment.

A cybersecurity awareness software will be used to help track the success of students in learning how to recognize phish and malware emails and report them to CCS. Our goal is to teach everyone how to respond to phishing emails, now and in the future. Your professors and TMU administration will not be notified of how or if you interact with these emails.

You will be notified with a message and offered information on how to avoid phishing emails in the future. 

Your name and results will be kept confidential—this training is designed to help you learn.

That’s it! If eligible, you’re automatically entered to win! 

Report three malicious emails without following the malicious instructions of more than two, and we’ll automatically enter you to win a $100 Amazon eGift Card and the Google Pixelbook Go.

Eligible winners will be notified via email by November 30, 2023.

If you do not wish your name to be included in this contest, please complete the  (google form) student phishing contest opt-out form (external link) .

If you do not wish to receive fake phish at all, you are required to successfully complete four campaign opt-out quizzes to demonstrate your understanding of cybersecurity best practices. Please note that completing a quiz and receiving a passing grade revokes your eligibility for TMU's 2023 Cybersecurity Awareness Month student phish reporting contest. You will still receive all other campaign messages.

Opt-out quizzes

• Week 1 Simulated Phishing Campaign Opt-Out Quiz (external link) 
• Week 2 Simulated Phishing Campaign Opt-Out Quiz (external link) 
• Week 3 Simulated Phishing Campaign Opt-Out Quiz (external link) 
• Week 4 Simulated Phishing Campaign Opt-Out Quiz (external link) 

How opting out works

During the first four weeks of October, TMU community members will begin to receive simulated phishing emails to their TMU email addresses. To be removed from each week’s simulated phishing mailing list, you must complete that week’s quiz and receive a passing grade by the deadlines listed below. 

Quizzes may be completed weekly or completed all at once.

Quiz completion deadlines

• Week 1 quiz deadline: Thursday, September 28, 2023 by 5 p.m.
• Week 2 quiz deadline: Thursday, October 5, 2023 by 5 p.m.
• Week 3 quiz deadline: Thursday, October 12, 2023 by 5 p.m.
• Week 4 quiz deadline: Thursday, October 19, 2023 by 5 p.m.

What is a passing grade?

A passing grade is 80% or 8 of 10 questions answered correctly.

You’re considered an eligible student for the phishing quizzes contest if you’re enrolled in at least one course for the fall 2023 term.

A series of four phishing quizzes will be available as part of TMU’s Cybersecurity Awareness Month campaign in October. The quizzes are built using Google Forms and you’ll need to be logged in with your my.torontomu account to access the quizzes.

• Once you complete the quiz and press the “submit” button, your email address will be automatically recorded for entry into the draw.
• You’ll have four opportunities to earn ballots for the contest. If you complete all four quizzes, you’ll earn four ballots for the draw.
• Of course, in the interest of fairness, you’ll only have one chance to play each quiz and earn one ballot per quiz.

Important: Don’t forget to click “submit” at the end of the quiz to ensure your entry in the draw! Otherwise, Google Forms will not capture your email or participation.

If you do not wish your name to be included in this contest, please complete this  (google form) student phishing quiz contest opt-out form (external link) .

1. CONTEST.  Toronto Metropolitan University (“Toronto Metropolitan”), through its Computing and Communications Services (“CCS” or the “Contest Sponsor”), is holding a Student Phish Reporting Contest (the “Contest”) to encourage students to learn how to recognize phish and malware emails and to report them to the CCS.
2. CONTEST PERIOD.  The Contest is open for Contest Entry (defined below) submissions between 12:00 a.m. on October 1, 2023, and 11:59 p.m. on October 31, 2023, Eastern Standard Time (the “Contest Entry Period”). All Contest Entries must be submitted during the Contest Entry Period. The Contest Sponsor’s server machine is the official timekeeping device for the Contest.
3. ELIGIBILITY.  The Contest is open to any resident of Canada excluding Quebec who: (i) has reached the legal age of majority in their province/territory of residence at the time of entry; and (ii) is a Toronto Metropolitan student (full-time or part-time) enrolled in at least one class in the spring/summer 2023 term, fall 2023 term or winter 2024 term (as of October 31, 2023). This Contest is not open to CCS employees, including any Toronto Metropolitan student who is also employed in CCS at the time of Contest Entry.
4. HOW TO ENTER.  No purchase necessary. Between 12:00 a.m. on October 1, 2023, and 11:59 p.m. on October 31, 2023, CCS will send to all Toronto Metropolitan students who are eligible for the Contest a series of simulated phishing email messages containing simulated malicious links and/or attachments (each an “Email” and collectively “Emails”). Any such, a student (an “Entrant”) may enter the Contest at any time during the Contest Entry Period by forwarding using the “forward” function in their email (do not use the “forward as attachment” option) three (3) Emails sent to the Entrant’s Toronto Metropolitan email account to spamrec@torontomu.ca (together a “Contest Entry”).  For clarity, the three (3) forwarded Emails together make one Contest Entry. The Emails do not have to be forwarded at the same time, but all forwarded Emails must be received by the spamrec@torontomu.ca email account by 11:59 p.m. on October 31, 2023. If an Entrant clicks on any simulated phishing link(s) and/or opens any simulated phishing attachments and follows malicious directions in more than two (2) Emails, such Entrant will be disqualified from participating in the Contest and will forfeit all rights to a Prize (described below). 
5. CONTEST ENTRY CONDITIONS. There is a limit of one (1) Contest Entry per Entrant during the Contest Entry Period. Additional Contest Entries submitted by an Entrant will not be counted for the purposes of this Contest. Use of any automated system to enter is prohibited and will automatically result in disqualification. By entering the Contest, you agree that you will comply with these Contest Rules and with the decisions of the Contest Sponsor, which are irrevocable and are legally binding in all matters related to the Contest.
6. PRIZES.  There are two (2) prize categories in the Contest:
   1. Amazon eGift Cards: forty (40) Amazon eGift Card Prizes, each consisting of a pre-paid Amazon eGift Card valued at one hundred dollars ($100 CAD) before applicable taxes (each a “Gift Card Prize” and collectively “Gift Card Prizes”). There is a maximum of one (1) Gift Card Prize available to be won per Entrant.
   2. Grand Prize: one (1) 13.3” Google Pixelbook Go with Intel Core i5, 8 GB RAM, 128 GB SSD Storage valued at approximately one thousand one hundred and forty nine dollars ($1,149.00 CAD) before applicable taxes (the “Grand Prize”).  For clarity, a Gift Card Prize winner is not eligible to be a Grand Prize winner.
7. WINNER SELECTION PROCESS. There are two (2) stages in the Contest. 
   1. During stage 1 of the Contest (“Stage 1”), on or about November 1, 2023, at 9:00 a.m. Eastern Standard Time in Toronto, Ontario, the Contest Sponsor will select at random forty (40) Contest Entries from all eligible Contest Entries submitted during the Contest Entry Period. The Contest Sponsor will validate the selected Contest Entries by comparing and confirming the email logs against the message submitted. In the event that, upon validation, a selected Contest Entry is not eligible, the Contest Sponsor will randomly select an additional Contest Entry and validate it until such time as forty (40) validated Contest Entries have been selected and forty (40) potential winners have been identified (each an “Eligible Gift Card Prize Winner"). 
   2. During stage 2 of the Contest (“Stage 2”), on or about November 1, 2023, at 9:00 a.m. Eastern Standard Time in Toronto, Ontario, the Contest Sponsor will select at random one (1) Contest Entry from the remaining eligible Contest Entries submitted during the Contest Entry Period. The Contest Sponsor will validate the selected Contest Entry by comparing and confirming the email logs against the message submitted. In the event that, upon validation, the selected Contest Entry is not eligible, the Contest Sponsor will randomly select an additional Contest Entry and validate it until such time as a validated Contest Entry has been selected the potential winner has been identified (the “Eligible Grand Prize Winner”). 
   3. Within twenty-five (25) business days of the selection of the Eligible Gift Card Prize Winners and the Eligible Grand Prize Winner, the Contest Sponsor, or its designated representative, will make a maximum of three (3) attempts to contact the Eligible Gift Card Winners and the Eligible Grand Prize Winner by emailing the Eligible Gift Card Winners and the Eligible Grand Prize Winner at the corresponding email address used to submit the eligible Contest Entry. Each Eligible Gift Card Winners and the Eligible Grand Prize Winner must accept the Prize as awarded by the Contest Sponsor within five (5) business days of the Selection or the Prize will be forfeited and awarded to an alternate Entrant in accordance with the foregoing provisions of this section, at the Contest Sponsor’s sole discretion. 
   4. The Gift Card Prizes and the Grand Prize are not transferable or substitutable unless authorized in writing by the Contest Sponsor before the transfer or substitution is made. 
   5. The odds of winning a Gift Card Prize or the Grand Prize are dependent on the total number of eligible Contest Entries received. 
8. DECLARATION OF ELIGIBLE WINNER.  
   1. Before an Eligible Gift Card Winner and the Eligible Grand Prize Winner is declared a winner (after declaration, referred to as a “Winner” and collectively “ Winners”), the selected Entrant must sign and return, within five (5) business days of notification, a declaration of compliance and release of liability prepared by the Contest Sponsor (the “Release”). The Release also requires the Eligible Winner to correctly answer a mathematical skill-testing question without mechanical or other aid.
   2. The Eligible Gift Card Winners and the Eligible Grand Prize Winner will be disqualified and forfeits all rights to the corresponding prize if the Eligible Gift Card Winner or the Eligible Grand Prize Winner: (i) fails to correctly answer the skill-testing question; (ii) fails to return the properly executed Release within the specified time; (iii) violates any of Toronto Metropolitan’s policies, procedures, standards, or guidelines during the Contest Period; or (iv) cannot be declared a Winner in accordance with these Contest Rules for any reason. If an Eligible Winner is disqualified, the Contest Sponsor reserves the right, in its sole and absolute discretion, to select another Entrant via random draw (in which case the provisions of Section 8 apply to such new Eligible Winner).
9. RIGHT TO SUSPEND/MODIFY/TERMINATE. If for any reason the Contest is not capable of running as planned, including infection by computer virus, bugs, tampering, unauthorized intervention, fraud, technical failures, strike or any other causes which corrupt or affect the administration, security, fairness, integrity or proper conduct of the Contest, the Contest Sponsor reserves the right to cancel, suspend and/or modify the Contest, or any part of it, and disqualify any individual or entity who is responsible for such action. If terminated, the Contest Sponsor may, in its sole discretion, determine the winners from among all eligible Contest Entries received up to time of such action using the procedures outlined herein.  
10. LIABILITY. No responsibility or liability is assumed by the Contest Sponsor for: any technical malfunction or other problems of any nature whatsoever, including, without limitation, those relating to the telephone network or lines, computer on-line systems, servers, access providers, computer equipment or software; the failure of any Contest Entry or other information to be received, captured or recorded for any reason whatsoever, including, but not limited to, technical problems or traffic congestion on the internet or at any website; or unauthorized human or non-human intervention of the operation of the Contest, including without limitation, unauthorized tampering, hacking, theft, virus, bugs, or worms.
11. GENERAL CONDITION
    1. The decisions of the Contest Sponsor with respect to all aspects of this Contest are final and binding on all entrants without right of appeal. ANYONE DEEMED BY THE CONTEST SPONSOR TO BE IN VIOLATION OF THE LETTER AND/OR SPIRIT OF THESE RULES FOR ANY REASON IS SUBJECT TO DISQUALIFICATION IN THE SOLE AND ABSOLUTE DISCRETION OF THE CONTEST SPONSOR AT ANY TIME. 
    2. By entering this Contest, each Entrant expressly consents to the Contest Sponsor, its agents and/or representatives, storing, sharing and using the personal information submitted for the purpose of administering the Contest and in accordance with Toronto Metropolitan’s privacy policy. This section does not limit any other consent(s) that an individual may provide the Contest Sponsor or others in relation to the collection, use and/or disclosure of their personal information.
    3. In the event of any discrepancy or inconsistency between the terms and conditions of these Rules and disclosures or other statements contained in any Contest-related materials, the terms and conditions of these Rules shall prevail, govern and control to the fullest extent permitted by law.
    4. The invalidity or unenforceability of any provision of these Rules shall not affect the validity or enforceability of any other provision. In the event that any provision is determined to be invalid or otherwise unenforceable or illegal, these Rules shall otherwise remain in effect and shall be construed in accordance with the terms as if the invalid or illegal provision were not contained herein.
    5. All issues and questions concerning the construction, validity, interpretation and enforceability of these Rules or the rights and obligations of participants, Contest Sponsor or any of the other the Released Parties in connection with the Contest will be governed by and construed in accordance with the domestic laws of the Province of Ontario. The parties hereby consent to exclusive jurisdiction and venue of the courts located in Ontario in any action to enforce (or otherwise relating to) these Rules or relating to this Contest.

1. CONTEST.  Toronto Metropolitan University (“Toronto Metropolitan”), through its Computing and Communications Services (“CCS” or the “Contest Sponsor”), is holding an Interactive Cybersecurity Phishing Quiz Contest (the “Contest”) to encourage students to learn more about online security.
2. CONTEST PERIOD.  The Contest is open for Contest Entry (defined below) submissions between 12:00 a.m. on October 1, 2023, and 11:59 p.m. on October 31, 2023, Eastern Standard Time (the “Contest Entry Period”). All Contest Entries must be submitted during the Contest Entry Period. The Contest Sponsor’s server machine is the official timekeeping device for the Contest.
3. ELIGIBILITY. The Contest is open to any resident of Canada excluding Quebec who: (i) has reached the legal age of majority in their province/territory of residence at the time of entry; and (ii)  who is a Toronto Metropolitan student enrolled in at least one class in the spring/summer 2023 term, fall 2023 term or winter 2024 term as of October 31, 2023. This Contest is not open to CCS employees, including any Toronto Metropolitan student who is also employed in CCS at the time of Contest Entry.
4. PRIZES. There are one hundred (100) prizes available in the Contest (each a “Prize” and collectively “Prizes”), each consisting of a $50 gift card to Skip the Dishes.
5. HOW TO ENTER. No purchase necessary. CCS will circulate via the my.torontomu.ca website portal pop-ups, campaign emails and social media posts the links to interactive phishing quizzes during the Contest Entry Period (each a “Game”).  Students must be logged in with their my.torontomu account to access a Game. To enter the Contest an eligible student (the “Entrant”) must, during the Contest Entry Period, complete the Game by answering the questions and submitting their answers through the linked Google Form included in the respective communication for the Game. Entrants that make the correct cybersafe choices in a Game will automatically be entered into the Contest (Each a “Contest Entry” and collectively the “Contest Entries”).
6. CONTEST ENTRY CONDITIONS. There is a limit of one (1) Contest Entry per Entrant per Game during the Contest Entry Period and four (4) Contest Entries total per Entrant during the Contest Entry Period. Use of any automated system to enter is prohibited and will automatically result in disqualification. By entering the Contest, the Entrant agrees to comply with these Contest Rules and with the decisions of the Contest Sponsor, which are irrevocable and are legally binding in all matters related to the Contest (the “Entry Conditions”).
7. WINNER SELECTION PROCESS AND ODDS OF WINNING. 
   1. On or about November 1, 2023, at 9:00 a.m. Eastern Standard Time in Toronto, Ontario, the Contest Sponsor will select at random one hundred (100) potential winners (each an “Eligible Winner” and collectively “Eligible Winners”) from all eligible Contest Entries submitted during the Contest Entry Period (the “Selection”). Selected Eligible Winners will each be eligible to receive a maximum of one (1) Prize. 
   2. Within twenty-five (25) business days of the Selection, the Contest Sponsor, or its designated representative, will make a maximum of three (3) attempts to contact each Eligible Winner by emailing the Eligible Winner at the corresponding email address used to submit the eligible Contest Entry.  Each Eligible Winner must accept the Prize as awarded by the Contest Sponsor within five (5) business days of the Selection or the Prize will be forfeited and awarded to an alternate Entrant in accordance with the foregoing provisions of this section, at the Contest Sponsor’s sole discretion. 
   3. The Prize is not transferable or substitutable unless authorized in writing by the Contest Sponsor before the transfer or substitution is made. 
   4. The odds of winning a Prize are dependent on the total number of eligible Contest Entries received. 
8. DECLARATION OF ELIGIBLE WINNER.  
   1. NO ONE IS A WINNER UNLESS AND UNTIL THE SPONSOR OFFICIALLY CONFIRMS THEM AS A WINNER IN ACCORDANCE WITH THESE RULES BEFORE BEING DECLARED A CONFIRMED PRIZE WINNER. Before an Eligible Winner is declared a winner (after declaration, referred to as a ”Winner” and collectively “Winners”), the Eligible Winner must sign and return, within five (5) business days of notification, a declaration of compliance and release of liability prepared by the Contest Sponsor (the “Release”). The Release also requires the Eligible Winner to correctly answer a mathematical skill-testing question without mechanical or other aid.
   2. By participating in the Contest and accepting a Prize, each eligible winner hereby: (i) confirms compliance with these Rules; (ii) acknowledges acceptance of the applicable Prize (as awarded); (iii) releases Toronto Metropolitan from any and all liability in connection with the Contest, their participation therein and/or the awarding and use/misuse of the applicable Prize or any portion thereof; and (iv) agrees to the publication, reproduction and/or other use of their name, address, voice, statements about the Contest and/or photograph or other likeness without further notice or compensation, in any publicity or advertising carried out by or on behalf of the Contest Sponsor in any manner or medium whatsoever, including print, broadcast or the internet. 
   3. The Eligible Winner will be disqualified and forfeits all rights to the Prize if the Eligible Winner: (i) fails to correctly answer the skill-testing question; (ii) fails to return the properly executed Release within the specified time; (iii) violates any of Toronto Metropolitan's policies, procedures, standards, or guidelines during the Contest Period; or (iv) cannot be declared a Winner in accordance with these Contest Rules for any reason. If an Eligible Winner is disqualified, the Contest Sponsor reserves the right, in its sole and absolute discretion, to select another Entrant via random draw (in which case the provisions of Section 8 apply to such new Eligible Winner).
      
      The odds of winning a Prize are dependent on the time of entry and the total number of eligible Contest Entries received.  
9. RIGHT TO SUSPEND/MODIFY/TERMINATE. If for any reason the Contest is not capable of running as planned, including infection by computer virus, bugs, tampering, unauthorized intervention, fraud, technical failures, strike or any other causes which corrupt or affect the administration, security, fairness, integrity or proper conduct of the Contest, the Contest Sponsor reserves the right to cancel, suspend and/or modify the Contest, or any part of it, and disqualify any individual or entity who is responsible for such action.  If terminated, the Contest Sponsor may, in its sole discretion, determine the winners from among all eligible Contest Entries received up to time of such action using the procedures outlined herein.  
10. LIABILITY. No responsibility or liability is assumed by the Contest Sponsor for: any technical malfunction or other problems of any nature whatsoever, including, without limitation, those relating to the telephone network or lines, computer on-line systems, servers, access providers, computer equipment or software; the failure of any Game, Contest Entry or other information to be received, captured or recorded for any reason whatsoever, including, but not limited to, technical problems or traffic congestion on the internet or at any website; or unauthorized human or non-human intervention of the operation of the Contest, including without limitation, unauthorized tampering, hacking, theft, virus, bugs, or worms.  
11. GENERAL CONDITIONS
    1. The decisions of the Contest Sponsor with respect to all aspects of this Contest are final and binding on all entrants without right of appeal. ANYONE DEEMED BY THE CONTEST SPONSOR TO BE IN VIOLATION OF THE LETTER AND/OR SPIRIT OF THESE RULES FOR ANY REASON IS SUBJECT TO DISQUALIFICATION IN THE SOLE AND ABSOLUTE DISCRETION OF THE CONTEST SPONSOR AT ANY TIME. 
    2. By entering this Contest, each Entrant expressly consents to the Contest Sponsor, its agents and/or representatives, storing, sharing and using the personal information submitted for the purpose of administering the Contest and in accordance with Toronto Metropolitan’s privacy policy. This section does not limit any other consent(s) that an individual may provide the Contest Sponsor or others in relation to the collection, use and/or disclosure of their personal information.
    3. In the event of any discrepancy or inconsistency between the terms and conditions of these Rules and disclosures or other statements contained in any Contest-related materials, the terms and conditions of these Rules shall prevail, govern and control to the fullest extent permitted by law.
    4. The invalidity or unenforceability of any provision of these Rules shall not affect the validity or enforceability of any other provision. In the event that any provision is determined to be invalid or otherwise unenforceable or illegal, these Rules shall otherwise remain in effect and shall be construed in accordance with the terms as if the invalid or illegal provision were not contained herein.
    5. All issues and questions concerning the construction, validity, interpretation and enforceability of these Rules or the rights and obligations of participants, Contest Sponsor or any of the other the Released Parties in connection with the Contest will be governed by and construed in accordance with the domestic laws of the Province of Ontario. The parties hereby consent to exclusive jurisdiction and venue of the courts located in Ontario in any action to enforce (or otherwise relating to) these Rules or relating to this Contest.