How to spot a phishing email
Six warning signs, and what to do when a message looks wrong.
Phishing emails pretend to be someone you trust so that you will click a link, open a file or hand over a password. They look more convincing every year, so it helps to know what to check.
Warning signs
- Pressure. The message says you must act now or something bad will happen.
- A sender that is slightly off. The name looks right, but the email address behind it does not match. Look at the address, not just the name.
- Links that go somewhere else. Hold your mouse over a link, without clicking, to see where it really goes.
- Unexpected attachments. Be careful with invoices, voicemails, shared documents and zip files you were not waiting for.
- Requests for money or new payment details. Gift cards, wire transfers and new bank account numbers are common tricks.
- Requests for your password or a sign-in code. Real companies do not ask for these by email or text.
What to do
- Do not click links, open attachments or reply.
- If it claims to be from someone you know, check by calling them on a number you already have. Do not use a number from the message.
- Forward it to support@nexusitservices.org, or send us a screenshot, so we can take a look.
- Delete it.
Good to know
If you already clicked or typed anything, read I clicked a suspicious link right away.