Spot a phishing message before you click
Most suspicious messages ask you to act faster than you can verify. Learn to check context, not just spelling.
An unexpected deadline is a reason to slow down, not a reason to rush.
The working idea
An unexpected deadline is a reason to slow down, not a reason to rush.
The goal is not to guess the answer faster. It is to make a decision that another person can understand and repeat.
What to check
Check the sender through a known contact method. Open the service directly rather than using a message link. Compare the request with normal account behavior.
The goal is not to guess the answer faster. It is to make a decision that another person can understand and repeat.
A realistic example
A message claims your paycheck is blocked and asks you to sign in through a shortened URL. Visit payroll through your saved bookmark and ask your team whether a notice was issued.
Good security work usually becomes visible through notes, tests, and the questions you decide to ask next. Keep the first iteration small.
What to avoid
Do not forward the suspicious message to colleagues as a clickable warning. Take a screenshot or report it using an approved channel.
Good security work usually becomes visible through notes, tests, and the questions you decide to ask next. Keep the first iteration small.
Pause, open the service using a trusted bookmark, and record what was different.
Good security work usually becomes visible through notes, tests, and the questions you decide to ask next. Keep the first iteration small.
