How to spot a Phish
Information on the best way to determine if the email you received is a phishing email
Last updated
Was this helpful?
Information on the best way to determine if the email you received is a phishing email
Last updated
Was this helpful?
Understanding Phishing
Phishing is a deceptive practice where fraudsters send emails or messages that appear to be from reputable sources. The aim is to trick individuals into revealing personal information, such as passwords and credit card numbers.
How Phishing Works
Phishing attempts usually involve the fraudster posing as a trustworthy entity. The target receives a message that prompts them to take an action, such as clicking a link or providing sensitive information, often leading to identity theft or financial loss.
Common Types of Phishing Attacks
Email Phishing: The most common form, where emails are sent to many individuals with the intent to scam unsuspecting victims.
Spear Phishing: More targeted, where specific individuals or companies are chosen due to their access to sensitive information.
Whaling: A type of spear phishing that targets high-profile individuals like executives.
Smishing and Vishing: Phishing conducted through SMS text messages (smishing) or phone calls (vishing).
Examine the sender's email address carefully. Phishing emails often come from addresses that appear legitimate at first glance but may have subtle misspellings or use a different domain.
For example: mary@mainstbamk.com is not the same as mary@mainstbank.com
If the service or request is unfamiliar to you but it's asking you to click a link or provide payment or information, or if the message is too good to be true, it is likely phishing. For example, if you receive an email supposedly from Zoom but you do not use Zoom, it's phishing.
Be cautious if the email encourages you to download an attachment or click on a link, especially if it creates a sense of urgency or invokes fear. Verify the legitimacy of the email before taking any action.
If you suspect the email might be legitimate, but you were not expecting it, contact the sender via phone/in person. This will give you the most accurate information. If you suspect it is phishing, you can report it using Outlook.
More information:
