Spotting a trap email before you click

Phishing is a message pretending to be a trusted source (your bank, a known platform, a delivery service) to steal your info. The goal: to make you click fast, without thinking. The right move is exactly the opposite - slow down.

The warning signs to watch for

Fake urgency, weird spelling mistakes, a sender address that doesn't add up, a link that doesn't lead to the real site: all red flags. Hover over the link without clicking to see where it actually points.

A serious company will never ask for your full password by email. If in doubt, don't use the link in the message: go straight to the official site by typing the address yourself.

Clicked already? Don't panic

If you entered your credentials on a fake site, change your password immediately and turn on two-factor authentication. Alert the real platform and keep an eye on your account. Acting fast hugely limits the damage.