Phishing emails aren't what they used to be. The spelling errors are mostly gone. The logos look perfect. But there are still ways to tell if an email is fake.
Check the Sender Domain
The display name might say 'Microsoft Support', but the actual email address is '[email protected]'. Always verify the exact sender address.
Urgency is a Red Flag
Attackers want you to act quickly before you think. If an email demands immediate action to prevent an account closure or to verify a high-value transfer, slow down. Verify it through another channel.
Don't Click Links Directly
If you get an alert about your bank account or Office 365, do not click the link in the email. Go to your browser and type in the website address. This simple habit prevents a massive amount of credential theft.
Report It
Don't just delete phishing emails. Report them to your IT team so they can block similar emails from reaching your coworkers.