Spotting a phishing email before you click

Phishing emails are the most common way businesses get broken into, and modern ones are well written. These are the checks that still catch them.

Step by step

1. Was it expected?. An invoice, a shared document or a password reset you did not ask for deserves a second look, however ordinary it seems.
2. Check the real sender address. Hover over, or tap, the sender name to see the actual address behind it. Look for small misspellings of a domain you know.
3. Hover before you click. Hover over a link to see where it really goes. On a phone, press and hold to preview it.
4. Be suspicious of urgency. Pressure to act now, quietly, or outside normal process is the oldest trick there is.
5. Treat bank detail changes as suspect. Any email asking you to change payment details should be confirmed by phone, on a number you already had - never the number in the email.
6. Never approve an unexpected sign-in prompt. If your phone asks you to approve a login you did not start, decline it and tell us.

If it does not go to plan

• Report it with the Report button in Outlook rather than deleting it, so it can be blocked for everyone.
• If you clicked or entered your password: change your password now and call us on (07) 5619 6555. Speed matters far more than embarrassment - we would always rather be told.

Still stuck?

Call us on (07) 5619 6555 or start a remote support session and an engineer will take a look. Screens move around between app versions, so if what you see does not match these steps, that is usually why.