Spotting phishing email
Phishing is a message that pretends to be from someone you trust so you will click a link, open a file, or hand over a password. It is still the most common way attackers get into a company, because it targets people rather than software.
Why it works
A good phishing email creates a feeling before you have time to think: urgency ("your account closes today"), fear ("we noticed a login from another country"), or reward ("you have a refund waiting"). That feeling is the attack. When a message rushes you, slow down.
What to look for
- The sender address, not the display name. A message can show "IT Support" while the real address is a stranger's mailbox. Hover or tap the name to see the full address.
- Links that do not match the words. Hover over a link before clicking. If the text says one company and the address shows another, do not click.
- Unexpected attachments, especially files that ask you to "enable content" or "enable macros".
- A request to log in from the email itself. Real services ask you to visit their site the normal way, not through a surprise link.
- Small wording and design mistakes, or a greeting that does not use your name.
What to do
- If anything feels off, do not click and do not reply.
- Confirm through a channel you already trust: type the website address yourself, or call the person on a number you already have.
- Report it using your Report phishing button. Reporting is a win even if the message turns out to be safe.
Remember: no legitimate organisation will punish you for checking. A thirty-second pause beats a stolen password.