How do I identify a suspicious email or phishing attempt?
Stop and think before you click. A phishing email is a fraudulent message designed to look like it comes from a legitimate person or organisation.
Its purpose is to trick you into revealing personal information, passwords, financial details, or other sensitive information.
Use the checks below to help identify suspicious emails. The more warning signs you notice, the more likely the email is a phishing attempt.
Were you expecting the email?
Ask yourself:
- Were you expecting this email from this person or organisation?
- Does the timing make sense?
- Does the request relate to something you are involved with?
Keep in mind that legitimate email accounts can be compromised. Even if the sender appears genuine, consider whether:
- The tone or language matches how they normally communicate.
- The request is unusual or unexpected.
- There is a clear reason why they are contacting you.
Does the email create urgency?
Phishing emails often try to pressure you into acting quickly by claiming that you must:
- Verify your account immediately.
- Make a payment.
- Avoid losing access to a service.
- Confirm your identity.
Criminals rely on people responding before they have time to think. If an email creates a strong sense of urgency or fear, pause and review it carefully.
Read the email carefully:
Look for signs that the message is not genuine, including:
- Poor spelling, grammar, or awkward wording.
- Inconsistent formatting, fonts, or branding.
- Low-quality logos or graphics.
- Generic greetings such as "Dear Customer" instead of your name.
While these signs do not always mean an email is fraudulent, they should make you more cautious.
Check links before clicking:
Before selecting any link, hover your mouse over it (without clicking) to view the actual web address.
| Trustworthy Links Usually: | Phising Email Links Usually: |
| Include the phrase ‘safelinks’ | Contains misspellings or slight variations of a well-known company name. |
| Exactly match the genuine Googled web address for a company | Includes extra words, numbers, or random characters. |
| Match what the email tends to be referring to | Does not match the organisation the email claims to be from. |
Trust your instincts:
If something about the email feels unusual or doesn't seem right, treat it with caution.
If you are unsure whether an email is genuine:
- Contact the sender using a trusted phone number or another known contact method.
- Visit the organisation's official website by typing the address into your browser rather than clicking links in the email.
What should I do if I think it's phishing?
If you believe the email is a phishing attempt:
- Report it as Spam or Phishing using your email application.
- If the email impersonates a legitimate organisation, consider forwarding it to that organisation's phishing reporting service.
- Delete the email to reduce the risk of accidentally interacting with it later.
Never reply to a suspected phishing email or click any links or open attachments it contains.