Security | How to Spot a Phishing Email

Security protocols for phishing emails

How to Spot a Phishing Email

Phishing emails are designed to trick you into revealing personal information, clicking dangerous links, or making payments. Here’s how to spot them and protect yourself:

1. Check the Sender

• Look closely at the sender’s email address—not just the display name.
• If in doubt, contact the sender through a known phone number or email.

2. Look for Errors

• Poor grammar or spelling is a red flag.
• Ask yourself: Does this message make sense coming from this person or organization?

3. Beware of Urgency

• Scammers try to rush you. Take a moment and verify the request.
• Trusted sources like banks or URLs. (Links)

4. Watch for Unusual Requests

• Never give out login credentials via email or try to type on a link you don’t recognize.
• Legitimate entities won’t ask for your password or sensitive info.

5. Don’t Pay Upfront

• Real employers won’t ask for money or gift cards.
• Don’t share financial details unless the request is from a verified, trusted source.

6. QR Code Caution

• QR codes can be dangerous. If you’re unsure, don’t scan it.
• Ask: Why is there a QR code in this email? Is it from a trusted sender?

Ask Yourself Before Clicking:

• Is the sender legitimate? Hover over the link and find the third-party website.
• Was I expecting this email or attachment?
• Is this offer/job/random message suspicious?
• Can I verify this request elsewhere?

---

How to Stay Safe

• Don’t click links, open attachments, scan QR codes, or reply to suspicious emails.
• Report phishing with the Phish Alert email and send it the IT department and forward the email to [e-mail]

---

What if You Fall for a Scam? Contact the Helpdesk immediately.

If you think you’ve been tricked:

1. Stop all contact with the scammer. Let your manager know.