Email phishing

An email arrives that looks like it's from a service you use — your bank, Netflix, Microsoft, your employer. It asks you to verify, reset, or confirm something via a link that leads to a lookalike login page. Anything you type goes straight to the attacker.

• Sender domain is slightly off (security@paypa1.com)
• Generic greeting ("Dear customer")
• Urgent language about account suspension
• Link text doesn't match the underlying URL
• Asks you to log in to fix a vague problem

"Your PayPal account has been temporarily suspended due to unusual activity. Click here within 24 hours to confirm your identity, or your account will be permanently closed."

1. 01Don't click the link. Open the company's app or website directly.
2. 02Hover over links to see the real destination before clicking.
3. 03Forward the email to the company's reporting address (e.g. phishing@paypal.com).
4. 04If you already entered credentials, change the password immediately and enable 2FA.