How to spot a phishing attempt before you click

Urgency is a clue

Messages that threaten account closure or demand immediate payment try to make you act before checking details.

Inspect the real sender

The display name can be copied. Check the full email address and domain for extra letters or suspicious variations.

Verify outside the message

Open the official app or type the website address yourself instead of using the link in the email.

Unexpected attachments deserve caution

Invoices, compressed files and “documents” can contain malicious content. Confirm with the sender first.

Use multi-factor authentication

Two-step verification reduces the damage caused by a stolen password.

If you already clicked

Change the password from a trusted device, sign out other sessions and review account activity. Contact your bank quickly if financial details were involved.