How To Spot a Phishing Email in 30 Seconds

You may have heard the term “phishing” before (and no, not in reference to the ‘80’s rock band). But what does this term mean, and how can you spot an attack before damage is done to your operations?  

What is Phishing? 

Phishing is a type of cybersecurity attack that tricks users into giving up sensitive information by convincing them that the message is from a legitimate source. Let’s see what this looks like in action.  

Signs of a Phishing attack  

(1) A suspicious links or attachments 

Let’s use an example. In an email, the sender asks the user to “see if the file downloads” on their end. This is a little strange, but perhaps nothing that raises an alarm on its own. Even if it seems legitimate, always go to the organization’s official website, phone number, or email address to confirm the validity of the message before downloading anything. 

(2) Urgent language 

Here’s where it gets more suspicious. Let’s say the sender requests that the user perform an action immediately because of an important deadline. This sense of urgency is almost always present in phishing emails – it’s meant to scare the receiver into acting immediately in order to avoid any conflict. This fear often takes precedence, and the user fails to realize that the message was fake all along! 

(3) Requests sensitive information 

Let’s say you receive an email that appears to be from an official source, asking you for your passport and driver’s license details. Many phishing emails will use this tactic, asking you to fill out a form or reply with sensitive information. However, most legitimate organizations will not ask for further sensitive information beyond the initial account creation – so if you see this, raise a reg flag.  

(4) Poor spelling and grammar 

The last sign is poor spelling and grammar. For example, if you notice that an email has a run-on sentence or a misspelled word. Although mistakes like these aren’t always indicative of a phishing attack, if all the other signs are there, it’s more than likely a false message. 

How Can I Protect Myself from Phishing Attacks? 

(1) Educate Yourself and Your Organization 

Great job – you’ve taken the first step by reading this article! The next step is to share it with your organization, and to implement cybersecurity awareness training. Remember the simulated email from above? Tools like those go a long way in ensuring that your organization is protected from all levels. 

(2) Report Suspicious Activity  

If you happen to spot a phishing email, make sure to report it immediately to your IT team. 

(3) Always Confirm 

If you receive an email and you’re not sure if it’s a phishing attack, before responding make sure to confirm the message through an established point of contact: official websites, phone numbers, and email addresses. 

If you’re still feeling nervous about phishing attacks – don’t worry! That’s what we’re here for. Phishing protection is part of Macro Connect’s security package. We also offer cybersecurity trainings for your employees so that you can be protected from all angles. Contact us today to learn how we can help you stay safe from cyberattacks!