How to spot a phishing email or text

Red flags

• Urgency or threats: "Your account will be closed today", "Unusual sign-in", "Payment failed".
• An odd sender address, like service@amaz0n-support.co. Tap the sender's name to see the real address.
• Links that don't match: hover over a link (or long-press on a phone) to see where it really goes.
• Requests for passwords, codes or payment. Real companies don't ask for these by email.
• Unexpected attachments, especially "invoices" you weren't expecting, or .zip and .html files.
• Generic greetings, and slightly-off logos or spelling.

The safe habit

Don't click. Go direct. Open the company's app, or type its website address yourself, and check your account there.

If you clicked

See Clicked a bad link? Do this now.

Report it

Use your email's Report phishing or Report junk option. Forward scam texts to 7726 (spells SPAM).