How to Spot a Phishing Email Before It Gets You
Phishing is the most common attack vector for both individuals and businesses. The premise is simple: send an email that looks legitimate, get the recipient to click a link or open an attachment, and either steal their credentials or install malware.
Modern phishing emails are often convincing. They copy the exact branding of banks, Microsoft, Amazon, or your employer. They create urgency. They look real. Here is how to tell the difference.
Check the Sender Address — Not Just the Display Name
An email can display any name in the "From" field. The actual sending address is what matters. An email that says it is from "Microsoft Support" but comes from [email protected] is not from Microsoft.
Look at the full email address, not just the display name. Legitimate companies send from their own domain. If the domain does not match the company, it is phishing.
Look for Urgency and Pressure
Phishing emails almost always create urgency: "Your account will be suspended in 24 hours." "Unusual activity detected — verify now." "Your payment failed — update your information immediately."
This urgency is designed to make you act before you think. Legitimate companies do not threaten immediate account suspension via email without prior notice. When you feel pressured to act immediately, slow down.
Hover Over Links Before Clicking
Before clicking any link in an email, hover over it to see where it actually goes. The displayed text might say "Click here to verify your account" but the actual URL might be something completely different.
Legitimate links go to the company's actual domain. If the URL looks strange, has extra words, or uses a different domain than expected, do not click.
Watch for Attachments You Did Not Expect
Unexpected attachments are a major red flag. Malware is commonly delivered through Office documents with macros, PDF files with embedded scripts, and ZIP files containing executables.
If you receive an attachment you were not expecting — even from someone you know — verify with the sender through a separate channel before opening it. Attackers frequently compromise email accounts and send malicious attachments to the victim's contacts.
Check for Spelling and Grammar Errors
Many phishing emails contain spelling mistakes, awkward phrasing, or formatting inconsistencies. This is less reliable than it used to be — AI tools have made it easier to write convincing phishing text — but obvious errors are still a signal.
When in Doubt, Go Directly to the Site
If you receive an email claiming there is a problem with your account, do not click the link in the email. Open a new browser tab and navigate directly to the company website. Log in there. If there is actually a problem with your account, you will see it.
SentinelForge Security scans email attachments and helps block malicious downloads in real time. View plans starting at $7.99/mo.