How to identify a phishing email.

Six warning signs that matter

1. The display name looks familiar but the sender domain does not match.
2. The message creates urgency, secrecy, fear or unusual pressure.
3. The visible link text and actual destination are different.
4. A routine conversation suddenly asks for payment, passwords or MFA codes.
5. The attachment type or filename is unexpected.
6. The reply-to address differs from the sender address.

What to do before clicking

Verify the request using a known phone number, a separate message or the organization’s official website. Never send a password or one-time code by email. If a message claims there is an account problem, open the service independently instead of using the email link.

When the email appears to come from your manager

Business email compromise often uses authority and urgency. Confirm payment changes, gift-card requests and sensitive document requests through a second channel.