How to Spot a Phishing Email Before It Catches You Out

If it looks too urgent or asks for personal info, it’s probably a phishing email. What is a phishing email and why should you care? We see this a lot: an email that pretends to be from your bank, a delivery service or even a colleague, and suddenly you’re clicking a link that steals your credentials. It matters because a single click can hand over passwords, install ransomware or expose personal data. Spotting the tell‑tale signs before you click is the cheapest defence. Step‑by‑step checklist to catch a phishing email Check the sender address. Hover over the name and look at the full email address. Phishers often use a look‑alike domain (e.g., account‑support@paypa1.com ) that slips past a quick glance. If the domain doesn’t match the official one, the email is suspicious. Watch out for generic greetings. Real organisations usually address you by name. “Dear Customer” or “Hi there” is a red flag that the sender didn’t bother to personalise the message. Hover over every link. Without clicking, move your mouse over the hyperlink and read the URL that appears in the status bar. If it points to a .ru, .tk or a misspelt domain, don’t trust it. Spot spelling and grammar errors. Professional companies proof‑read their communications. Sloppy language, missing punctuation or odd phrasing often betray a scam. Beware of unexpected attachments. An Excel sheet, ZIP file or PDF you weren’t expecting can hide malware. Verify with the sender via a different channel before opening. Identify