How to spot a phishing email

Six warning signs, and what to do when a message looks wrong.

Updated September 21, 2026

Phishing emails pretend to be someone you trust so that you will click a link, open a file or hand over a password. They look more convincing every year, so it helps to know what to check.

Warning signs

  • Pressure. The message says you must act now or something bad will happen.
  • A sender that is slightly off. The name looks right, but the email address behind it does not match. Look at the address, not just the name.
  • Links that go somewhere else. Hold your mouse over a link, without clicking, to see where it really goes.
  • Unexpected attachments. Be careful with invoices, voicemails, shared documents and zip files you were not waiting for.
  • Requests for money or new payment details. Gift cards, wire transfers and new bank account numbers are common tricks.
  • Requests for your password or a sign-in code. Real companies do not ask for these by email or text.

What to do

  1. Do not click links, open attachments or reply.
  2. If it claims to be from someone you know, check by calling them on a number you already have. Do not use a number from the message.
  3. Forward it to support@nexusitservices.org, or send us a screenshot, so we can take a look.
  4. Delete it.
Good to know

If you already clicked or typed anything, read I clicked a suspicious link right away.