A demand to act immediately
An account closure, missed delivery or urgent payment request is designed to rush you. Pause before responding. Open the service through the app or address you normally use.
PHISHING GUIDE
Pause before a message makes the decision for you.
Unexpected requests can look convincing. Use these warning signs and verification steps before following a link, opening a file or sharing information.
Five warning signs worth a second look
A request for private information
Treat requests for a password, sign-in code, Social Security number or banking details as a reason to stop. A message is not proof that the sender is entitled to this information.
An unexpected file or QR code
Invoices, shared documents and QR codes can redirect you to a fake sign-in page or deliver unwanted software. Verify the request through a separate, familiar channel.
A familiar name with an unfamiliar address
Display names can be copied. Review the sender and reply address, then check the actual destination of a link. A professional design or correct spelling does not establish trust.
A payment method that feels unusual
Gift cards, cryptocurrency and a last-minute change to bank details deserve independent verification. Contact the person using an established phone number before sending money.
A suspicious message? Take a clear next step.
Do not reply, open the attachment or use a phone number supplied in the message. Visit the organization through a trusted app or type its known address yourself. If this is a work account, use your organization’s reporting process. After reporting the message, delete it. If you already shared a password, change it through the genuine service and review active sessions, recovery settings and forwarding rules.
Have a question about your inbox?
Organize the email-security questions you would like to discuss in a consultation.