Seven red flags that an email might be phishing

Phishing emails are designed to make you act before you think. Training your eyes to catch a few common signs makes a big difference. Share this checklist with your team.

The red flags

1. Urgency or threats. "Your account will be closed in 24 hours" is a classic pressure tactic.
2. An unexpected request for money or gift cards. Check by phone using a number you already know.
3. A sender address that is slightly off. Look closely at the domain after the @ sign.
4. Links that don't match. Hover over a link to see where it really goes before you click.
5. Unexpected attachments. Especially invoices, "voicemails" and files you were not expecting.
6. A request to log in or confirm details. Go to the site yourself instead of using the link.
7. Something just feels off. Odd wording, a strange greeting, or a message that doesn't sound like the person.

What to do if you're unsure

Don't click, and don't reply. Report it to whoever looks after IT or security in your business, then delete it. If you already clicked or entered a password, say so straight away. Speed matters far more than embarrassment.

Want to see how well prepared your business is overall? Try the free Cyber Health Check.