Phishing: 6 signs an email is a scam

Most attacks don't start with a virus but with an email that looks ordinary. These are the signs every employee should know.

1. Excessive urgency — "your account will be blocked today", "pay within an hour".
2. A sender that doesn't match — the name is familiar, the address isn't.
3. Links that go somewhere else — hover before you click.
4. A request for a password or code — no serious service asks for it by email.
5. A changed IBAN — always confirm by phone.
6. Unexpected attachments — especially .zip, .html or documents with macros.

What to do

Don't click, don't reply, and tell your IT contact. A quick report protects the whole team. Two-step verification (MFA) stops most of the damage even when someone slips.