Give an unexpected message a second look.

Check the sender beyond the display name

A familiar name or logo is not proof of identity. Look at the full sender address and whether the request makes sense in context.

Use a route you already trust

If a message asks you to sign in or check a payment, open the official app or type the known website address yourself instead of following the message link.

Take urgency as a reason to pause

Unexpected threats, prizes, or deadlines deserve a closer look. A message can look polished and still be deceptive.

Use your mail provider’s reporting tools

Report suspicious messages using your mail provider’s phishing or spam option. Avoid opening unexpected attachments just to investigate.

Further reading: CISA — Recognize and Report Phishing