Phishing messages are designed to look routine.
COMMON FORMS
"Your mailbox is full, click to upgrade" "Your password expires today, verify now" "Failed delivery, click to release messages" A shared document requiring you to sign in An invoice attachment asking you to enable macros A message apparently from a colleague asking for an urgent payment or gift cards
HOW TO CHECK
Read the actual sender address, not the display name Hover over links and read the real destination Look for urgency, threats and deadlines Ask whether you expected this message Check with the supposed sender by phone, using a number you already have
WHAT WE WILL NEVER DO
Ask for your password by email. Not ever, for any reason.
IF SOMEONE ENTERED CREDENTIALS
Change the password immediately, check for forwarding rules, and open a ticket.
TRAINING YOUR TEAM
Most compromises start with one person clicking. Five minutes spent showing colleagues these patterns is worth more than any technical control.
