Resources & references
Everything you need to defend against phishing, in one place.
Interactive prevention checklist
0/12
Downloadable guide
A printable PDF covering phishing types, red flags, safe habits, and reporting steps. Share it with your team or print it for your desk.
Download PDF guideReport a suspicious message
Use the built-in tools and tell your security team.
- ✉ Gmail / Outlook: use the "Report phishing" option
- ✉ SMS: forward the text to 7726 (SPAM)
- ✉ Email your security team with the full header
- ✉ If you clicked or entered data, change passwords & enable MFA now
Common phishing red flags
- Urgency & threats ("account closed in 24 hours")
- Requests for passwords, OTPs, or card details
- Sender address that doesn't match the company's real domain
- Misspelled or lookalike domains (amaz0n.com, paypa1.com)
- Unexpected attachments (.zip, .exe, .docm)
- Generic greetings ("Dear customer")
- Payment in gift cards, crypto, or wire transfers
- Links that differ from the displayed text
- "Do not discuss this with anyone" secrecy
- Poor grammar, typos, and odd formatting
- Fake "security checkpoints" asking for extra info
- Unsolicited QR codes leading to login pages
Remember the golden rule
Stop. Verify through a channel you trust. Report anything suspicious. When in doubt, assume it's phishing.