How to Recognise and Avoid Phishing Attacks

Phishing messages try to trick people into revealing passwords, paying fake invoices or installing malware. They arrive by email, SMS, social media and phone calls.

Common warning signs

• Urgent requests to act immediately
• Unexpected attachments or links
• Sender addresses that are slightly misspelled
• Requests to change bank details or buy gift cards
• Messages that ask you to keep things secret

Check before you click

Hover over links to see where they really go, and contact the sender through a known phone number if a request seems unusual.

Payment requests need extra care

Always verify changes to supplier bank details by phone with a known contact before paying.

Report, do not hide

If you click something suspicious, report it straight away. Quick reporting can stop an attack from spreading.

A moment of caution is the best defence against phishing. Build a culture where checking is encouraged, not seen as slowing things down.