Knowledge base · practical guide
Phishing: ten ways to spot fake messages and scams
Phishing often relies on urgency and uncertainty. A few steady habits can help protect your email, online banking and government accounts.
Ten useful habits
- Do not click under time pressure.
- Check the sender address and look for misspellings or unusual domains.
- Preview a link before opening it.
- Open banks and government services using your own bookmark or typed address.
- Never share sign-in, SMS or two-factor codes.
- Treat unexpected attachments with care.
- Use strong, unique passwords and a password manager where possible.
- Keep Windows and your browser updated.
- If unsure, ask someone you trust before acting.
- If you already entered details, contact the service through its official channel promptly.
A simple rule
- Pause, check the sender and go to the service yourself instead of following a message link.
If a message worries you
- Do not reply or call a number in the message.
- Take a screenshot and ask for help through a known contact route.