Phishing attempts come in a variety of ways, and we want to make sure everyone is aware of some of the best defenses against them. It is best to stop a phishing event before it is able to start, and part of that is being able to spot common themes of these emails, texts or phone calls.
- 🔍 How to Spot Suspicious Emails (Key Red Flags)
Before clicking or replying, look for these common indicators:- Sense of Urgency: Any request claiming you must act “immediately,” “within the hour,” or that your account will be suspended if you don’t click now.
- Sender Verification: The display name looks familiar (e.g., “CEO” or “HR”), but when you hover over the name, the actual email address is unusual (e.g., a Gmail address or a misspelled company domain).
- Request for Credentials: Any email asking you to log in or verify your password on an external website.
- Suspicious Links: Hover your mouse over any link. If the preview URL does not match the expected website, do not click it.
- 🛑 Immediate Response (What to Do When in Doubt)
If you receive an email that looks even slightly suspicious:- DO NOT Click Links or Attachments.
- DO NOT Reply or acknowledge the sender.
- CALL THE SENDER to confirm it actually came from them
- IF EMAIL IS PHISHING
- SCREENSHOT the email and OPEN A TICKET with your IT vendor to provide details and discuss what was done so far
- REPORT EMAIL by right clicking email > Report > Report phishing
- IF SOMEONE DID CLICK A PHISHING EMAIL
- CONTACT YOUR IT VENDOR RIGHT AWAY
Now is also a good time to review your Cyber Insurance Coverage. If you have not added Cyber Coverage to your insurance policy and you do not have Cyber Coverage through an outside vendor, please reach out to us. We are happy to go through your options with you.
Happy Holidays!