Skip to content
English
Sign In
My Tickets
  • There are no suggestions because the search field is empty.

Phishing Email Tips

Phishing (pronounced: fishing) is an attack that attempts to steal your money, or your identity, by getting you to reveal personal information -- such as credit card numbers, bank information, or passwords -- on websites that pretend to be legitimate. Cybercriminals typically pretend to be reputable companies, friends, or acquaintances in a fake message, which contains a link to a phishing website.

Microsoft Support: Protect yourself from phishing >

Phishing Email Tips

  • Don't assume any email is safe, even if it has not ended up in your junk folder or been quarantined.
  • Don't click on any links or open attachments until you're sure it's genuine.
    • Use links you trust rather than the links provided in the email.
  • If it looks like it's from somebody you know, ask them to confirm they sent it.
    • Not by the original method it was sent. If an email address has been compromised you may get a reply from somebody pretending to be the real person.
  • 8 common signs of a phishing email:
  1. It's in your junk folder
  2. There's a banner at the top with a warning message (added by Microsoft)
  3. Urgent action is demanded
  4. Incorrect sender's address (but don't trust correct addresses either)
  5. Poor spelling or grammar
  6. Uncharacteristic greeting or words used
  7. Asks you to sign in
  8. Asks you to download unexpected files (Dropbox, OneDrive, WeTransfer, etc.) or click on links.

Reporting Phishing Emails

Report phishing emails by the Report Phishing button in Outlook. If it’s missing, simply delete the message.

Tip: If the Report Phishing button is missing or not working then just delete the message. It's more important for you not to click the email links than to report the message.

Note: The Report Phishing button is unavailable in shared mailboxes.

    • Outlook - Classic Ribbon:
    • Outlook - Simplified Ribbon:
    • Outlook mobile
      • Open message
      • Select menu (3 dots) . . .
      • Select Report Phishing
  • If you're still unsure your message is genuine, raise a support ticket with the email date, subject & sender's address and the IT Team will check.