A significant share of attacks start not with a technical flaw but with a split-second human decision — clicking a link, opening an attachment or typing a password into a fake page. The signs below help you recognise a suspicious email in time.
Warning signs
- Sender: the display name may look familiar while the actual address or domain is different — for example, a domain with one letter changed.
- Urgency or fear: phrases like “your account will be closed” or “payment is due today” push you to act without thinking.
- Unexpected attachments or links: hover over a link to check the real address before clicking.
- Requests for credentials or payment: legitimate services do not ask for your password by email.
- Changed bank details: always confirm such a request from a partner through a contact channel you already know.
- Unusual instructions: out-of-process requests in a manager’s name, such as urgently buying gift cards.
What to do with a suspicious email
- Do not click links, open attachments or reply.
- Report it to your IT or security team using your organization’s agreed procedure.
- If you clicked by mistake, say so: the sooner it is reported, the easier it is to contain.
- If you entered your password, change it immediately and make sure multi-factor authentication (MFA) is enabled.
Reporting a suspicious email is never a mistake — an unreported incident can become a serious risk.
These topics form the core of LevelUP’s Security Awareness training and are tailored to each organization’s line of work.
TagsSecurity AwarenessPhishing