Phishing used to be easy to spot: broken English, a prince, a lottery. Today's messages look like they came from your bank, your boss or your software vendor. Here are six checks that still catch most of them.
1. It creates urgency
"Your account will be closed in 24 hours." "Pay this invoice today." Pressure is the attacker's main tool because it stops you from thinking. Slow down.
2. The sender address is slightly off
The display name says "Microsoft Support" but the address is something else. Look at the actual address, not the name. Watch for lookalikes such as rnicrosoft with an "rn" in place of an "m".
3. The link goes somewhere else
On a computer, hover over a link without clicking. The real destination appears at the bottom of the window. If it does not match the company it claims to be from, do not click.
4. An attachment you were not expecting
Invoices, voicemail transcripts and shared documents are favorite disguises. If you were not expecting it, confirm with the sender using a phone number you already have.
5. It asks for money or credentials
A request to change bank details, buy gift cards, or "sign in again" is a red flag even when it appears to come from someone you know. Verify by phone before acting.
6. It just feels slightly wrong
An odd greeting, an unusual request, or a message from someone who never emails you. Trust that instinct and check.
What to do
- Do not click, reply or open the attachment.
- Report it to whoever handles IT for you, so others can be warned.
- If you already clicked or entered a password, say so right away and change that password. Speed matters far more than embarrassment.
Regular short training and simulated phishing tests make a real difference. Our Smart Guard service includes both, along with the filtering that stops most of these from reaching your inbox at all.