1. Check the full sender address
Display names can imitate colleagues, banks or support teams. Expand the sender details and inspect the address carefully before acting on an unexpected request.
2. Verify payment changes independently
Confirm a new bank account or urgent invoice using a contact method already known to you. Avoid using a telephone number supplied only in the unexpected message.
3. Protect account sign-in
Use a unique password and enable multi-factor authentication where available. Never send a one-time sign-in code in response to an email request.
4. Treat links and files with care
Open the service through a saved address or its official app when an email asks you to sign in. Unexpected attachments deserve a separate check before opening.
5. Keep a reporting routine
Save suspicious messages with their original details and report them through your organization's established process. If account access may be affected, review sessions and security settings through the provider directly.