TIP SHEET · Both · 1 page
Phishing Red Flags Tip Sheet
Keep this next to the inbox. If two or more flags show up, do not click. Verify out of band.
Stop if you see
- Urgency: “act in 15 minutes or the account closes.”
- A request for a password, a code from your phone, gift cards, or a new bank account.
- A display name you trust with an address you do not.
- A link that does not match the company when you long-press or hover.
- An unexpected attachment, especially a zip or a document that asks you to “enable content.”
- Slightly wrong spelling of a real domain, or a string of random letters before .com.
Do this instead
- Open the app or website yourself. Never use the link in the message.
- Call a number you already had, not the number in the email.
- If you already clicked, change the password from a device you trust and tell someone the same day.
HavenShield · Free to print and share with your family or team.