How to Protect Yourself from Phishing Emails

Secure your inbox with these definitive steps to identify, report, and neutralize phishing attempts before they compromise your security.

1. Inspect the sender's actual address. Do not rely on the displayed sender name. Click or hover your cursor over the sender's name to reveal the full email address; if the domain does not match the organization it claims to represent, mark it as spam.
2. Scrutinize all embedded links. Hover your cursor over any button or link without clicking to preview the destination URL in the bottom corner of your browser. If the destination URL differs from the legitimate website address or displays a suspicious string of characters, do not interact with it.
3. Identify urgent or threatening language. Phishing attempts rely on creating a false sense of panic or immediate urgency to bypass critical thinking. If an email demands an immediate password reset, threatens account suspension, or claims a suspicious login, treat it as a malicious attempt.
4. Scan for inconsistent formatting. Check for poor grammar, misspellings, or low-resolution logos within the email body. Professional organizations maintain strict brand standards; deviations in design are primary indicators of fraudulent content.
5. Enable multi-factor authentication. Navigate to your account security settings and enable Multi-Factor Authentication (MFA) using an authenticator app. Even if you accidentally disclose your password to a phishing site, MFA acts as a final barrier to unauthorized access.
6. Report and delete the threat. Use your email provider's built-in 'Report Phishing' or 'Mark as Spam' button. This trains your email filter to recognize similar patterns in the future, then delete the message permanently.