Recognising Phishing Messages Links and Attachments

Inspect messages safely and avoid links, files and forms designed to steal information.

What you will learn

• Identify phishing warning signs
• Inspect destinations without opening them
• Handle attachments and QR codes safely

Safety note

Use invented examples during practice. Never publish or send real passwords, PINs, verification codes, recovery codes, private tokens or complete financial details. If money or account access may be at risk, contact the relevant provider promptly through independently verified official details.

Read the complete message

Phishing may pretend to be a bank, delivery service, employer, family member or administrator. Check the sender, wording, request and context.

Poor spelling can be a warning, but polished language does not prove legitimacy. Artificial intelligence can help scammers produce convincing messages.

Check links independently

On a computer, hover to inspect a link destination without opening it. On a phone, use a safe preview only when you understand the action. Look carefully for misspelled or misleading domains.

Instead of following an account-warning link, open the official app or type the known website address yourself. A padlock only means the connection is encrypted.

Treat files and codes carefully

Unexpected documents, applications and compressed files may contain malware or lead to credential theft. Confirm the sender through another method before opening.

A QR code is a concealed link. Do not scan one merely because it appears on a flyer, package, payment request or parking sign. Preview and verify the destination.

Guided practice

1. Compare a real domain with two look-alike examples.
2. Inspect a link without opening it.
3. Write a verification message for an unexpected attachment.

Knowledge check

1. Does polished writing prove a message is genuine?
2. What does a browser padlock establish?
3. Why should QR codes be treated like links?

Completion standard

Continue when you can complete the guided practice safely and explain the knowledge-check answers in your own words.