how to spot a phishing email

Spot phishing emails by verifying the sender's actual address, inspecting links before clicking, and being skeptical of urgent requests for sensitive information or payments.

Verify the Sender Address. Do not rely solely on the display name. Tap or click the sender's name to reveal the full email address and check the domain after the @ symbol for subtle misspellings or incorrect extensions.
Inspect Links and QR Codes. Hover your mouse over links on a desktop or long-press them on mobile to preview the actual destination URL. Ensure it matches the expected domain and is not a shortened or suspicious link.
Watch for Urgency and Threats. Be suspicious of messages that demand immediate action, threaten account suspension, or create panic. Legitimate organizations rarely use high-pressure tactics to solicit sensitive data.
Verify Through Trusted Channels. If you receive an unexpected request, do not use the contact information in the email. Instead, contact the organization directly through a verified website or phone number you already know.