Overview

Mass email communications have a higher bar to clear in order not to get blocked by spam filters. Messages can miss the intended audience if they include phishy email characteristics. By following these rules you help ensure campus email recipients remain sensitized to characteristics that are typical of phishing messages and reduce the chance that your message gets blocked.  

Communicators should follow these basic guidelines to help messages from being blocked:  

• Provide sufficient identification
• Authenticate messages from external marketing communication vendors
• Avoid spammy characteristics

These guidelines are especially important if the communications request personal information.

Provide sufficient identification to avoid getting blocked

• Send from a berkeley.edu email address

• Include a UC Berkeley contact for message validation, e.g.,

  • campus phone number 

  • campus physical address

  • berkeley.edu email address

  • berkeley.edu web address

• Send the message through berkeley.edu servers when possible

• Use berkeley.edu web links when possible (also applies to graphics)

• Do not display a URL that then links to or passes-through to another URL (this can occur with 3rd party link-tracking services)

• Simple and direct URLs (e.g., security.berkeley.edu/phishing) are preferable to long, cryptic URLs.

Authenticate messages from external marketing communication vendors

If the mass mailing is sent through an external marketing vendor (e.g., Constant Contact) from a berkeley.edu address, use DomainKeys Identified Mail (DKIM) to prove that the message is legitimate. (If mass mailings are coming from outside a berkeley.edu address, you do not need to do this). If you are using a third party vendor, be sure to follow procurement rules: evaluating terms and conditions, making sure their privacy policies meet our standards, and always provide an opt-out method. 

DKIM is a protocol that allows an organization to take responsibility for sending a message, even when it sends via a 3rd-party service provider.  DKIM can help prevent email marketing campaigns from being flagged as spam or phishing.

Fill out this form and work with the bConnected team to implement DKIM for bulk mailing:

Note: DKIM authentication is not required for email message posting to UC Berkeley Google Groups (bConnected Lists).

Avoid spammy characteristics

Avoid spammy/phishy qualities like:

• ALL CAPS

• Spammy words (e.g., "free money") in the subject line (see below for an extensive list of words and phrases to avoid)

• Excessive punctuation!!?!

• Attaching documents - instead link to a web page for additional content (e.g., Google doc)

• If an attachment is necessary, use a PDF file rather than a Word, PowerPoint deck or other file types