Look for a rushed decision
Phishing messages invent urgency: a suspended account, a payment problem, an unexpected parcel or a tax refund. A polished logo does not make an email genuine. Fraudsters also copy the style of real companies, so consider the situation, not just spelling mistakes.
Check the sender and destination separately
A familiar display name is not proof. Inspect the complete sender address and the destination of any link without opening it. A domain with extra words, unexpected endings or misspellings deserves suspicion. Do not type a password into a page reached through an unsolicited message.
Verify using your own route
If a message claims to be from your bank, delivery firm or store, open the official app or type the known website address yourself. Contact support using information you already trust, not a phone number or link provided by the message. Treat unknown attachments as unsafe.
If you already clicked
Do not panic or pay a 'recovery' stranger. Change compromised passwords from a trusted device, enable multifactor authentication, check account sessions and financial activity, run an updated security scan, and report the message using your country's reporting channels. If payment details were entered, contact the card issuer immediately.
A general educational overview, not a substitute for professional guidance. Check current local rules and trusted primary sources before making consequential decisions.
Share this article
