Security

How to spot a phishing email

Most hacks start with one convincing email. Six quick checks that catch nearly all of them.

3 min read

Check who it’s really from

Look at the actual email address, not just the name. “Microsoft Support” sending from a random Gmail address is a fake.

Hover before you click

On a computer, hover over any link and look at the address that pops up. If it doesn’t go where it claims to, don’t click it.

Watch for pressure

“Your account will be closed today” or “Invoice overdue, pay now” are classic tricks. Real companies rarely rush you like that.

Be wary of attachments you weren’t expecting

Unexpected invoices, delivery notes and voicemails are a favourite way to deliver malware. If in doubt, phone the sender on a number you already know.

Never enter a password from an email link

If an email says you need to log in, close it and go to the website yourself. That one habit stops most account takeovers.

Already clicked?

Don’t panic. Change the password for that account straight away, turn on two-factor authentication, and give us a call. The sooner we look, the easier it is to fix.

Still stuck? We’ll sort it.

Free diagnosis, no fix no fee, and plain-English advice from a real person.