IT ISSUE · SECURITY AND THREATS
Suspicious email or phishing concern
A message that looks wrong. Below are the signs worth checking, what to do next, and what not to do with it.A suspicious message usually imitates something ordinary: a supplier, a colleague, your bank, a delivery notice, a Microsoft sign-in page. What it wants is a password, an MFA approval, a payment, a download or simply for you to act before you think.
Warning signs
- The sender address is slightly different from the expected address.
- The message creates unusual urgency or secrecy.
- A link opens an unexpected sign-in page.
- The request changes payment or bank details.
- An attachment wasn't expected.
- The message asks for a password or MFA code.
What to do
- Do not reply, open attachments or follow further links.
- Do not approve an unexpected MFA prompt.
- If credentials were entered, report it promptly.
- If a payment request is involved, verify it using a trusted contact method.
- Preserve the message rather than deleting it.
- If money has already been sent, call your bank straight away. Recalling a payment is time-critical. It's the bank's job, not ours.
Review the message, account and device
We review what you have, check the relevant account or device and identify the immediate technical steps. Where an incident is serious enough to need a specialist, a legal adviser or your insurer, we coordinate with them rather than stretching to cover it ourselves.