Open university services by typing uzc.edu.pl yourself or using your own bookmark. Check the domain before entering information. A logo, urgent wording or sign-in link does not by itself prove a message is genuine.
Set a unique password and enable an additional verification method offered by the account. Store recovery codes securely outside your email inbox. On a shared device, do not save the password and always sign out.
Verify requests for passwords, one-time codes or urgent payments through a separate channel. When reporting an issue, include the time, page address and steps taken, but redact tokens, codes and other people's information from screenshots.