Phishing messages try to persuade people to reveal information, open a harmful attachment, approve an unexpected sign-in or send money. A message can look professional and still be fraudulent.
Warning signs to check
- Unexpected urgency: a demand to act immediately, pay quickly or keep a request secret.
- Unusual requests: someone asks for passwords, one-time codes, gift cards or an unexpected transfer.
- Lookalike sender details: the display name looks familiar but the actual address or domain differs.
- Unexpected links or files: the message asks you to sign in or open something you were not expecting.
- Process changes: a supplier or colleague suddenly changes bank details or asks to bypass normal approval.
How to verify safely
- Do not use the message's link or phone number to verify its claim.
- Contact the person or organisation through a known, trusted channel.
- Check the full sender address and the destination of a link without opening it.
- Never share a password or one-time code in response to a message.
- Report suspicious messages using your organisation's approved process or the provider's reporting option.
If you already responded
Act quickly and calmly. Use the genuine service website or official support channel to change a compromised password, revoke active sessions where possible, enable multi-factor authentication and notify your bank or organisation if financial or work accounts may be affected.
Build safer habits
For teams, agree a simple reporting route and make it clear that early reporting is better than hiding a mistake. Learn more about security awareness support.