How to spot a suspicious email
Learn a repeatable 30-second check for unexpected email before you click, reply or open a file.
Why this matters
Suspicious emails often create urgency, imitate familiar brands or ask you to bypass normal procedures. A calm check of the sender, request, link destination and context prevents many incidents.
By the end of this lesson
- Recognise the main warning signs
- Choose a safe verification method
- Know when and how to report the situation
What to notice
- Unexpected urgency or pressure
- Sender name and actual address do not match
- Unusual request for secrecy
- Link destination differs from the visible text
- Unexpected attachment or shared document
- Greeting, tone or signature feels inconsistent
- Request bypasses an established process
What to do
- Pause before acting
- Inspect the full sender address
- Hover or long-press links before opening
- Verify unusual requests through a known channel
- Open trusted services from your own bookmark
- Report the message using the approved process
Frequently asked questions
What is the safest first step?
Pause and verify the sender, request and destination before interacting.
Does professional design prove an email is legitimate?
No. Attackers can copy logos, colours and signatures.
Should I reply to ask whether the email is real?
Use a separate trusted channel instead of replying to the suspicious message.
Angvlar Security Awareness