Phishing emails are better written than ever, but most still give themselves away. Share this list with your team.
- Urgency or threats about account closure
- Unexpected invoices or payment detail changes
- Links that do not match the sender's domain
- Requests to approve an MFA prompt you did not start
- QR codes in emails asking you to log in
- Shared documents from people you have never worked with
- Senders who want to move the conversation to text message
Action | Do | Do not |
|---|---|---|
Suspicious email | Report it with the Report button | Reply or forward it to colleagues |
Unexpected MFA prompt | Deny it and tell IT | Approve it to make it go away |
Payment change request | Call the supplier on a known number | Use the number in the email |
