Why urgency is dangerous
Be suspicious when a message demands immediate payment, secrecy, a password reset, gift cards or an unusual change to bank details. Pressure is designed to stop you checking.
Check more than the display name
Expand the full email address and inspect the actual domain. Swapped letters, added words, unusual reply-to addresses and unexpected file-sharing links are common warning signs.
Verify using a trusted channel
Call the person or supplier using a number already stored in your records. Do not rely on the contact details contained inside the suspicious request.
Treat unexpected MFA prompts as an alarm
Never approve a sign-in prompt you did not initiate. Repeated requests can mean an attacker already knows the password and is waiting for approval.
What to do after a mistake
Report it immediately, disconnect an affected device if malware may have run and use a known-safe device to contact IT. Early action can revoke sessions, reset access and reduce the impact.
Did this guide help?
If an Avant IT article helped you solve a problem or better understand your technology, you can make an optional $5 contribution towards creating more practical guides. Help keep us awake and typing by shouting the team a coffee! Every guide is created in-house by our passionate team, often in our own time, to share our knowledge and give back to the community.
Your support is completely optional but always appreciated.Help us build a free guided troubleshooting centre for common email, Wi-Fi, internet, computer and browser problems.
Support the free tools