← All infographics
Security Awareness · Email

Spot a Phishing Email

Six red flags to check before you click, reply or download.

1
Urgent or threatening tone“Act now or your account will be closed.” Pressure is a classic tactic.
2
Mismatched sender addressThe display name looks right, but the real email domain doesn’t match.
3
Generic greeting“Dear Customer” instead of your name often signals a mass scam.
4
Suspicious linksHover to check the real URL before you click — it may not match the brand.
5
Unexpected attachmentsInvoices or “documents” you didn’t ask for can carry malware.
6
Requests for credentialsLegitimate organisations never ask for your password or MFA code.
When in doubt, don’t click — verify with the sender directly.
Cianaa Technologies — independent PCI, ISO & SOC assessments across NZ & AU.Book a scoping call →