Phishing emails are fake messages designed to get you to click a link, open an attachment or hand over a password. They’re the most common way small businesses get into trouble, and they’re getting harder to spot.
Five warning signs
- Urgency or fear. “Your account will be closed today.” “Invoice overdue.” “Your package couldn’t be delivered.” Pressure is the point.
- A sender that’s almost right. Look at the actual email address, not just the name. “Microsoft Support” from a Gmail address isn’t Microsoft.
- Links that don’t go where they say. On a computer, rest your mouse over a link (don’t click) and look at the address that pops up. On a phone, press and hold.
- Unexpected attachments, especially invoices, shipping notices or “scanned documents” you weren’t expecting.
- Requests for passwords, payment or gift cards. Real companies don’t ask for your password by email, and your boss doesn’t need you to buy gift cards.
What to do instead
- Don’t click. Go to the website yourself, by typing the address or using a bookmark.
- If it seems to come from someone you know, call them on a number you already have. Don’t reply to the email.
- If you did click or enter a password, change that password right away, and let us know so we can check for anything else.
One honest mistake is all it takes, so it’s worth a quick refresher with your whole team.
Want a second opinion on your setup? Your first 15 minutes are on us. Call (403) 381-7080 or send us a message. Already a client and need help now? Start here.