Multi-factor Authentication Required for myVPN Starting July 22, 2024 - Learn More

Workday Notifications

Treasury team meeting

Stay Safe While Staying Informed

UBC has moved to the enterprise application Workday to manage many of our logistical processes. Cybercriminals are quick to pounce on the opportunity that this change has made available to them.

We have prepared the following information to arm you with the knowledge to spot some key differences in how to identify whether a Workday notification that you receive is legitimate or fraudulent:

Working from home office

How to Know that a Workday Email is Legitimate

Legitimate Workday emails do not have the yellow external email security warning tag typically associated with emails that originated from outside of UBC.

If you receive a Workday email with a yellow external email security warning tag, forward it as an attachment to

Legitimate Workday emails will only come from email addresses ending in If you can view the address of the sender from your mailbox and it contains a suffix, you can explicitly trust these messages. You will notice that the overwhelming majority of messages will come from a single email address:

How to Know That a Workday Email is Fraudulent

As laid out in the “How can I recognize a phishing email’ section of the Phishing Emails page on this site, fraudulent Workday notifications can come in many different disguises, from sophisticated deception to obvious fraud.

With computer working at office
In general, Workday emails will not contain clickable links and will not accept email responses.

Beware of lookalike email addresses

  • e.g. is only slightly different than, but it’s still very much fraudulent.
It’s important to note that the sending email address is often not visible on mobile devices [phones, tablets] without additional taps or clicks.
The sending email address is visible on desktops using Outlook for FASmail or the Outlook Web Application (OWA) when messages are viewed in the preview pane or opened.
Watch out for common errors within the content of the email [e.g. grammar and spelling].
Take notice of the formatting of the message itself [e.g. messages that purport to originate from Workday but do not follow the standard Workday look and feel you are used to].

*Remember: “Think before you click”. If you have concerns about a Workday message or link, don't open the message or click the link. Forward it as an attachment to


CTLT Staff meeting

Next Level Assurance

We are pleased to provide a new measured level of assurance as we transition into the use of the Workday as UBC has worked extensively to ensure specific security controls are in place for the domain. In time this same level of assurance will apply to other email domains as well.

You will frequently be asked to log into Workday using multi-factor authentication (MFA).

The use of MFA with Workday adds a second layer of confidence, knowing that your private information is secure. If you are ever concerned about the authenticity of a message that appears to be from Workday, don't open the message or click the link. Forward it as an attachment to

Go Further...

UBC Crest The official logo of the University of British Columbia. Urgent Message An exclamation mark in a speech bubble. Caret An arrowhead indicating direction. Arrow An arrow indicating direction. Arrow in Circle An arrow indicating direction. Arrow in Circle An arrow indicating direction. Chats Two speech clouds. Facebook The logo for the Facebook social media service. Information The letter 'i' in a circle. Instagram The logo for the Instagram social media service. Linkedin The logo for the LinkedIn social media service. Location Pin A map location pin. Mail An envelope. Menu Three horizontal lines indicating a menu. Minus A minus sign. Telephone An antique telephone. Plus A plus symbol indicating more or the ability to add. Search A magnifying glass. Twitter The logo for the Twitter social media service. Youtube The logo for the YouTube video sharing service. Bell Warning