6 red flags to spot a phishing email instantly

• Spot the warning signs early – Suspicious sender addresses, urgent requests, unexpected attachments and mismatched links are common indicators of phishing emails
• Protect your personal information – Legitimate organisations rarely ask for passwords, banking details or verification codes by email, so always verify requests through official channels
• Act quickly if you suspect a scam – Avoid clicking links or opening attachments, report the email as phishing, delete it, and change your password immediately if you've shared sensitive information

Phishing emails are one of the most common cyber threats facing internet users today. Cybercriminals use fake emails to trick people into revealing passwords, banking details or other sensitive information. These messages often appear to come from trusted organisations, making them difficult to spot at first glance.

Fortunately, most phishing emails share common warning signs. Knowing what to look for can help you avoid scams and protect your personal and financial information.

Here are six red flags that can help you identify a phishing email instantly.

1. The sender's email address looks suspicious

A phishing email may appear to come from a legitimate company, but the sender's email address often tells a different story.

For example, an email claiming to be from your bank might use an address such as support@secure-bank123.com instead of the bank's official domain.

Before clicking anything, carefully check the sender's full email address—not just the display name.

Why it's a red flag:

• Uses misspelled or unusual domain names.
• Includes random numbers or characters.
• Doesn't match the organisation it claims to represent.

2. It creates a false sense of urgency

Phishing emails often try to pressure you into acting immediately.

You might see messages like:

• "Your account will be suspended today."
• "Verify your identity within one hour."
• "Immediate action required."
• "Your payment has failed."

Scammers rely on panic to stop you from thinking critically.

What to do: Pause, verify the message through the company's official website or customer service, and avoid acting under pressure.

3. It asks for sensitive information

Legitimate organisations rarely ask you to send passwords, PINs, one-time verification codes or banking details by email.

If an email requests personal or financial information, treat it with extreme caution.

Examples include requests for:

• Passwords.
• Debit or credit card details.
• Bank account numbers.
• National identity numbers.
• Security verification codes.

Rule of thumb: Never share sensitive information through email unless you've independently confirmed the request is genuine.

4. Links don't match where they claim to go

A phishing email may include a button or hyperlink that appears legitimate but actually directs you to a fake website.

Before clicking, hover your mouse over the link (without clicking) to preview the destination URL. On mobile devices, press and hold the link to view the address in many email apps.

Watch for:

• Misspelled website names.
• Extra words or characters in the domain.
• URLs that don't match the company's official website.

If you're unsure, open your browser and type the company's website address manually instead of using the email link.

5. Poor spelling, grammar or formatting

Many phishing emails contain obvious language mistakes, awkward wording or inconsistent formatting.

Common signs include:

• Frequent spelling errors.
• Unusual grammar.
• Low-quality logos.
• Strange fonts or layouts.
• Generic greetings like "Dear Customer" instead of your name.

While some phishing emails are highly polished, careless errors remain a common warning sign.

6. Unexpected attachments

Be cautious of email attachments you weren't expecting, especially if they ask you to enable macros or install software.

Attachments with file types such as .exe, .zip, or suspicious Office documents can contain malware.

Before opening an attachment:

• Confirm it was actually sent by the person or organisation.
• Contact the sender through another trusted method if you're unsure.
• Scan the file with antivirus software when possible.

When in doubt, don't open it.

What to do if you suspect a phishing email

If you think an email is fraudulent:

• Don't click any links or open attachments.
• Don't reply to the message.
• Mark it as phishing or spam in your email service.
• Delete the email after reporting it.
• If you accidentally entered your password, change it immediately and enable multi-factor authentication (MFA) where available.

Acting quickly can reduce the risk of further harm.

12 ways students can improve their academic performance

Meanwhile, TheRadar earlier reported 12 ways students could improve their academic performance and maximise their potential.

Whether preparing for examinations, working towards higher grades or simply aiming to become a more effective learner, students can benefit from making small but meaningful changes to their routines.