The University of Maryland Baltimore County may have pulled off the biggest upset in the history of the NCAA tournament when they beat Virginia, but don’t count out an even bigger March Madness threat: GETTING SCAMMED.

Cybersecurity researchers say the annual NCAA basketball tournament brings with it a slew of phishing emails from scammers looking to capitalize on the public’s eagerness to join the fun. Like other big seasonal events, March Madness has a way of capturing widespread attention, which means emails that mention it have a better chance of drawing clicks from unsuspecting victims.

A March Madness-related phishing attack could take several forms. One would be an email asking you to click on a link to a tournament-themed website. But instead of a well-known news or bracket site such as ESPN or CBS, the link might take you to something that looks like a team fan site. You then might be asked to confirm your identity by logging in to Gmail, Facebook, or another social media site. And that’s how the thief gets access to your information.

Other popular March Madness threats include:

Stay safe, basketball fans. To learn more, visit www.consumerreports.org.