Email & Phishing Scams

Recognise common phishing and impersonation patterns before a message leads you to a harmful link, attachment or payment request.

Phishing relies on a fast reaction

A phishing email may pretend to be a bank, delivery company, employer, government agency, retailer or colleague. It may create urgency about a payment, account suspension, tax issue, delivery or security alert. Sender names and logos can be copied, so check the full sending address and destination before you respond.

Do not use a message link to verify an account

Open a new browser window or use the organisation’s official app. Do not enter a password, one-time code, banking detail or identity information after following an unexpected email link. Treat attachments carefully, especially when a message asks you to enable content, sign in or install software.

What to do next

Paste the suspicious content into the Message checker for a pattern-based review. If you have entered credentials, change that password and any reused passwords through official account pages, then enable multi-factor authentication.