Phishing emails try to trick you into clicking a link, opening an attachment, or handing over a password or payment information. They’re getting more convincing, but most still give themselves away.
Warning signs
- Urgency or threats. “Your account will be closed today!” is a classic pressure tactic.
- A sender address that doesn’t match. The name says your bank, but the address is a jumble of letters or a lookalike domain.
- Links that go somewhere unexpected. Hover over a link (without clicking) to see where it really leads.
- Requests for passwords or payment details. Legitimate companies don’t ask for these by email.
- Unexpected attachments, especially invoices or shipping notices you weren’t expecting.
- A greeting that doesn’t use your name, or spelling that’s just a little off.
What to do
- Don’t click links or open attachments in a suspicious email.
- If you’re unsure, contact the company directly using a phone number or website you already trust.
- Report it as phishing or spam in your email program, then delete it.
- Turn on two-factor authentication for your email and important accounts.
Already clicked?
Don’t panic. Change the password for that account right away, and for any other account that uses the same password. Run a security scan, and if you’d like help checking your computer, contact Bev.