How to Identify Phishing Emails and Suspicious Links
Phishing emails are fake messages that appear to come from legitimate sources but are designed to steal your personal or company information, such as passwords or credit card details.
Follow these guidelines to help identify and avoid phishing attempts:
1. Check the Sender’s Email Address
-
Verify that the sender’s domain matches the company’s official website.
-
Be cautious of similar-looking domains (e.g.,
microsoft-support.cominstead ofmicrosoft.com).
2. Look for Suspicious Links
-
Hover your mouse over any link (without clicking) to see the real destination.
-
Avoid clicking if the URL looks suspicious, has misspellings, or redirects through unknown sites.
-
Genuine company links usually use HTTPS and official domains.
3. Watch Out for Urgent or Threatening Language
-
Phrases like “Your account will be suspended” or “Immediate action required” are common red flags.
-
Legitimate organizations do not pressure you into quick action via email.
4. Check for Grammar and Formatting Errors
-
Many phishing emails contain poor grammar, spelling mistakes, or awkward phrasing.
-
Official communications from trusted companies are usually well-written.
5. Be Cautious with Attachments
-
Avoid downloading attachments from unknown senders.
-
Malicious attachments can install malware or ransomware.
6. Do Not Share Personal Information
-
Never provide passwords, verification codes, or banking details in response to an email.
-
Companies will never ask for these details through email.
7. Verify Directly with the Company
-
If you receive a suspicious message, contact the company through their official website or hotline—not through the links or numbers in the email.
8. Report Suspicious Emails
If you believe you have received a phishing email:
-
Do not click on any links or attachments.
-
Report it immediately to the IT Helpdesk at [insert your helpdesk email or portal link].
-
Delete the email from your inbox and trash folder.
Stay alert — think before you click!
