A message arrives asking you to approve a payment, reset your password, or open an urgent document. It looks familiar, but something feels wrong.
Phishing messages use impersonation and persuasive language to encourage people to reveal information, transfer money, or open harmful content. Recognizing the warning signs can help your team avoid costly mistakes.
Check the Sender Carefully
A familiar display name does not confirm who sent an email. Examine the full email address and look for unexpected domains, misspellings, or subtle changes.
An email that appears to come from a colleague or supplier should still be checked if the request is unusual.
Be Cautious With Urgent Requests
Phishing messages often create pressure. They may claim that your account will be closed, a payment is overdue, or a manager needs an immediate transfer.
Pause before acting. Verify sensitive requests through a trusted contact method, such as a known phone number. Avoid using contact details supplied in the suspicious message.
Inspect Links and Unexpected Attachments
Before opening a link, check whether its destination matches the service you expect. On a computer, hovering over a link can reveal its address.
When uncertain, open the organization’s website directly through a trusted bookmark or by typing its known address. Treat unexpected attachments with caution, even when the message appears to come from someone you know.
Protect Your Accounts
Use unique passwords and enable multifactor authentication where available. These safeguards help protect accounts, although they do not remove the need to check suspicious requests.
Never share passwords, verification codes, or recovery codes in response to an unexpected message.
Make Reporting Easy
Employees should know how to report suspicious messages and feel comfortable doing so. If someone has clicked a link or entered information, prompt reporting gives your security team a better chance to respond effectively.
Build Awareness With AnnuSec
AnnuSec’s cybersecurity awareness training helps teams recognize suspicious messages and develop safer habits.
Contact AnnuSec to strengthen your team’s ability to recognize and report phishing attempts.