How to Spot a Phishing Email

Security

How to Spot a Phishing Email

← Back to Help Center

Protect Yourself from Phishing Attacks

Phishing emails try to trick you into revealing passwords, clicking malicious links, or downloading harmful attachments. Learn how to spot them.

Warning Signs of Phishing

  • Urgent or threatening language – “Your account will be closed!” or “Act immediately!”
  • Suspicious sender address – Look closely: [email protected] vs microsoft.com
  • Generic greetings – “Dear Customer” instead of your actual name
  • Spelling and grammar errors – Professional companies proofread their emails
  • Requests for sensitive info – Legitimate companies won’t ask for passwords via email
  • Suspicious links – Hover over links to see where they actually go
  • Unexpected attachments – Be wary of .exe, .zip, or macro-enabled documents

How to Check a Link

  1. Hover (don’t click!) over the link
  2. Look at the URL that appears (usually bottom left of your browser or in a tooltip)
  3. Check if the domain matches the supposed sender
  4. Be suspicious of shortened URLs (bit.ly, etc.) in business emails

What to Do If You Receive a Suspicious Email

  1. Don’t click any links or download attachments
  2. Don’t reply to the email
  3. Report it – Forward to your IT team or use the Report Phishing button
  4. Delete it after reporting

If You Clicked a Suspicious Link

  1. Don’t enter any information on the page
  2. Close the browser immediately
  3. Contact our helpdesk right away
  4. Change your password if you entered credentials
  5. Monitor your accounts for suspicious activity

Remember

When in doubt, don’t click. Contact the sender through a known, trusted method (not by replying to the suspicious email) to verify the request.

Need more help? Contact our helpdesk and we’ll be happy to assist you.