SEE THE SITUATION

A familiar name. An unexpected demand.

It is the start of a busy shift. A message says your mailbox will close unless you confirm your account. Phishing uses a believable story to get access, information or money. First, name the action it asks you to take. Then decide whether it fits your normal process.

YOUR GOAL

Recognize a sensitive request before a familiar name or deadline makes the decision for you.

Message preview

Microsoft 365 Supporthelp@review-access.example

Mailbox access ends today

“Confirm your account within 30 minutes. Do not contact your administrator.”

Confirm your work accountUnexpected sign-in request

The action is the clue: it wants account access.

Training example · fictional details

Keep these essentials

Read the full sender address and link destination when you can inspect safely. A logo, spelling, padlock or internal address is not proof of authority.

Pressure plus an unexpected sensitive action deserves an independent check. You may report uncertainty without proving an attack.

Download the response field guide ↓