Spotting Phishing Emails

Phishing emails are tricky messages designed to steal your personal information or trick you into doing something harmful. They can look very convincing, but with a little practice, you can learn to spot them. Here's a simple guide to help you stay safe:

Remember: If you're ever unsure about an email, don't click on any links or open any attachments. Contact Technology Services immediately.

Key Signs of a Phishing Email:

Suspicious Sender Address:

• Check the "From" address carefully. Does it look like a legitimate company or person?
• Look for misspellings or extra characters in the email address.
• Example: Instead of "amazon.com," it might be "amaz0n.com" or "amazon-security.net."

Suspicious Shared Documents:

• Attackers may use Google Drive to share a phony document with bad links.
• These often come from external users but try to include pictures or names of district staff in the body
• Always double check the person sharing the document to you

Fake Forwards or Email Chains:

• Sometimes attackers draft a fake email forward and try to include official district staff to make the email look legitimate.
• Entire email chains can be faked, if uncertain, call the staff member at their official district extension
• Fake chains often come from external senders, be cautious of new emails mimicking an existing email chain in progress when sent from someone you don't know.

Generic Greetings:

• Phishing emails often use generic greetings like "Dear Customer" or "Valued User" instead of your name.

Urgent or Threatening Language:

• Phishers often try to create a sense of urgency or fear to make you act quickly.
• Examples: "Your account will be suspended," "Immediate action required," or "You've won a prize!"

Requests for Personal Information:

• Legitimate companies rarely ask for your password, social security number, or credit card details via email.

Payment Requests:

• Wire Transfer payment requests are almost always a scam.
• Be cautious of pressure to make payments and double check all information in quotes and invoices

Links and Attachments:

• Hover your mouse over links (without clicking) to see the actual website address. Does it look suspicious?
• Be cautious of attachments, especially from unknown senders.
• Always verify a link by going directly to the website, not by clicking the link in the email.

Poor Grammar and Spelling:

• Many phishing emails contain grammatical errors and typos.

Unusual Requests:

• Be wary of emails asking you to do something out of the ordinary, like transferring money or changing your password immediately.

What to Do If You Suspect a Phishing Email:

• Don't Click Anything: Do not click on any links or open any attachments.
• Report It: Forward the suspicious email to Technology Services immediately.
• Delete It: After reporting it, delete the email from your inbox.

Remember These Tips:

• Be Skeptical: If an email seems too good to be true, it probably is.
• Verify Information: If you're unsure about an email, contact the company directly through their official website or phone number.

By following these best practices, you can help protect yourself and our organization from phishing attacks.

If you would like more information about Darktrace, our additional layer of protection against phishing attacks, and how to further secure your account by enabling 2-Step Verification, please refer to the articles linked below:

Darktrace Email Guide

How to enable 2-Step Verification
 

For any other questions or support:

Email: help@centralunified.org 

Call: 559.276.3130