ThreatGrid: How to Spot Phishing Warning Signs

A shared file, a password reset, an overdue invoice. Phishing often looks like routine communication. That familiarity is what the attacker relies on: a message that feels ordinary enough to act on without a closer look.

Check the warning signs:

• Is the request unexpected?

• Does it create urgency, fear or curiosity, or rely on someone's authority?

• Is it asking you to sign in, open an attachment, change payment details or share information?

• Does the sender address, link destination or writing style differ from what you normally see?

Individual clues may have an innocent explanation, but together they could indicate a phishing attempt. If something feels out of place, verify the request before acting.

Verify through a route you already trust

Verification should happen outside the message. Open the organisation's known website or app yourself. Call one of their known contact numbers. Start a new message to a contact you already trust. Do not use the link, number or reply path supplied in the suspicious request. For more guidance, read the US Federal Trade Commission’s advice on recognising and avoiding phishing scams.

Practise recognising the terms with ThreatGrid

ThreatGrid is Prventi’s cyber security awareness word-search game. Find the security terms hidden in the grid and read each definition as it unlocks.

When your next unexpected message arrives, pause, check the warning signs, verify through a trusted route and report anything suspicious.

Play ThreatGrid