What To Do
Check The Sender And Request
An urgent demand for a payment change, password, or login link deserves additional scrutiny.
Verify Using A Separate Channel
Use an official phone number or a previously known contact rather than replying to suspicious instructions.
Avoid Opening Unexpected Attachments
If you were not expecting a file, confirm the sender and purpose first.
Report And Contain
Report suspected phishing through your provider. If you entered credentials, change the password and notify your administrator promptly.
Everyday Warning Signs
Be careful when a message asks you to act urgently, move a payment, share a verification code, or sign in through an unfamiliar link. A believable logo or familiar sender name is not proof that the message is genuine. Attackers can imitate real organizations and use messages that appear to come from people you know.
If a request involves money or access, open the service directly from a saved bookmark or contact the person using a number you already trust. Avoid relying on the contact details included in the suspicious message. Reporting the message quickly can help protect coworkers who may have received the same request.
Related Guides
If you already clicked, follow our first-response checklist. For wider prevention, see the business cybersecurity checklist and Cybersecurity services.
General education only. The right steps depend on your actual systems, obligations, and goals.