Spotting Phishing Emails & Fake Websites

Phishing is the most common entry point for cybercrime. An attacker sends you a convincing fake email or message, you click a link, enter your details on a fake site — and they have your credentials.

Email Red Flags

• Sender email address doesn't match the claimed organisation (e.g. support@amaz0n-help.com)
• Urgent language: "Your account will be suspended in 24 hours"
• Generic greeting: "Dear Customer" instead of your name
• Links that don't match the claimed destination (hover to check before clicking)
• Attachments you weren't expecting

How to Check a Link

Before clicking any link in an email:

1. Hover over it (don't click) to see the actual URL
2. Check the domain — amazon.com is safe; amazon.com.login-verify.net is not
3. When in doubt, go directly to the website by typing it in your browser

Fake Website Indicators

• URL is slightly misspelled (paypa1.com, g00gle.com)
• No padlock/HTTPS in the address bar
• Poor grammar or unusual formatting
• Asking for information the real site would never ask for at that stage

The Golden Rule

When in doubt, don't click. Go directly to the website. Call the company on a number you find yourself, not one provided in the suspicious message.