5 Tips for Spotting A Phishing Email

Phishing attacks

Every day countless phishing emails are sent to unsuspecting victims. While some of these messages are obviously fraudulent, others can be a bit more convincing.

So, how do you tell the difference between a phishing email and a legitimate one? Unfortunately, there is not one single technique that works in every situation, but here are 5 things to be on the lookout for:

1. Keep a lookout for mismatched URLs

The first thing we recommend checking in a suspicious email is the integrity of any embedded URLs. Often the URL in a phishing email will appear to be perfectly valid. However, if you hover your mouse over the top of the URL, you should see the actual hyperlinked address. If the hyperlinked address is different from the address that is displayed, it’s very likely that the message is fraudulent.

2. URLs contain a misleading domain name

People who launch phishing scams often rely on their victims not knowing how the DNS naming structure for domains work. So, how does it work? You need to look at the domain itself, for example, info.dpcomputing.com.au, is a child domain of dpcomputing.com.au because dpcomputing.com.au appears at the end of the full domain name (on the right-hand side). Conversely, dpcomputing.information.com.au would clearly not have originated from dpcomputing.com.au because the reference to dpcomputing.com isn’t fully on the right-hand side of the domain name.

3. The message contains poor spelling and grammar

Whenever a large company sends out an email, the email is usually reviewed for spelling, grammar, legality and other things. Therefore, if a message is filled with poor grammar or spelling mistakes, it probably did not come from a major corporation’s legal or marketing department.

4. The message appears to be from a government organisation

Any email that is claiming to have come from a government organization, such as the IRS, that promises a rebate or makes threats about a penalty, should sound alarm bells. All government organizations have protocols, and usually, those protocols don’t include sending emails out of the blue offering you refunds or demanding payments.

5 The offer seems too good to be true

The saying ‘it is too good to be true’ holds very, very true for email messages. If you receive a message from someone unknown to you who is making big promises, the message is a scam.

Phishing emails are becoming more and more sophisticated as technology becomes smarter, so the scammers will always be trying new tactics. We can help you and your employees to ‘spot the phish’ and stay safe online. Contact us to stay guarded against every facet of social-engineering threats via continuous simulation and training.