Spotting Phishing Messages

Look at the message, not the logo

Phishing copies the appearance of a trusted brand. The details, however, usually give it away.

What to check

• The sender address. Look at the full address, not just the display name.
• The link. Hover over it, or long-press on a phone, to see the real destination.
• The ask. Is it asking for a password, a code, or a payment?
• The tone. Urgency, threats, and secrecy are warning signs.
• The context. Were you expecting this message?

A worked example

A message claims to be from a bank and says your account is locked. The sender address ends in a different domain, the link points to an unrelated site, and the message asks you to confirm your full password. Three separate signals confirm it is not genuine.

Detail	Genuine	Suspicious
Sender	Matches the domain	Look-alike domain
Link	Official address	Shortened or odd address
Ask	Directs you to the app	Requests a password or code

The safe response

Do not use the link. Open the organisation's app or type its address yourself. If the issue is real, you will find it there.