Fraudulent emails often look genuine. They are after passwords, payments, or a click on a dangerous link or attachment. These warning signs help you spot them.
Warning signs
Sender: The name looks familiar, but the address doesn't match (e.g. microsoft-support@example-mail.com).
Pressure and urgency: “Your account will be locked”, “pay immediately”, “today only”.
Unexpected links or attachments: e.g. invoices, deliveries or shared documents nobody announced.
Link target doesn't match: Hover over the link (don't click). The address shown differs from the expected sender.
Requests for credentials: Legitimate companies never ask for passwords or codes by email.
Changed bank details or payment instructions “from the boss”: Always confirm by phone using a known number, never using contact details from the email.
Generic greeting, unusual language or mistakes.
What to do with a suspicious email
Don't click links, open attachments or reply.
In Outlook, report it via Report › Report phishing. If the button is missing, forward the email to support.
Then delete the email.
If in doubt: Better to ask support once too often. If you already clicked, see “Clicked a suspicious link or opened an attachment”.