OOPS! YOU CLICKED A LINK YOU SHOULDN’T HAVE

Always hover over the sender’s name in an email to display the actual email address. Check for slight misspellings or variations that mimic legitimate addresses (e.g., ‘microsoftsupport.com’ instead of ‘microsoft.com’). Be particularly cautious with emails from free email services like Gmail or Yahoo, as these are commonly used by phishers.

Do not open email attachments from unknown sources. Even if you know the sender, be cautious, as their account may have been compromised. Phishing emails often contain attachments disguised as invoices, legal documents, or other official files that, when opened, can install malware on your system.

Hover over any links in the email without clicking them. This will reveal the actual URL. Check for discrepancies or misleading domain names. Phishing links often look similar to legitimate ones but may have subtle differences, like ‘amaz0n.com’ instead of ‘amazon.com’.

Use known or officially listed contact details, not those provided in the questionable message, to call the sender and discuss your concerns. Avoid sharing personal details during this verification call. If the communication is confirmed as a phishing attempt, report it to the appropriate parties and document the incident for future reference.

Legitimate companies rarely ask for sensitive information via email. If an email requests personal details like passwords or credit card numbers, it’s likely a phishing attempt. Contact the company directly using a phone number or website address you know is real, not the contact information provided in the email.