How to Spot a Phishing Email in 30 Seconds
A practical checklist your team can use to catch phishing attempts before clicking, without needing a security background.
Phishing remains the most common way attackers get into small business environments. The good news is that most phishing emails share a handful of obvious tells. Once your team knows what to look for, a 30-second pause is usually enough to spot trouble.
Use this quick checklist before clicking, replying, or opening attachments:
- Check the sender address, not just the display name. "Microsoft Support" can come from any address. Hover and read the actual domain.
- Look for urgency or fear. Real vendors rarely demand action in the next hour.
- Hover over every link. If the visible text says one thing and the URL points somewhere else, stop.
- Watch for unexpected attachments, especially invoices, shipping notices, or shared documents you did not request.
- Be skeptical of password resets, MFA prompts, or account warnings you did not trigger.
- Notice tone shifts. A familiar contact suddenly writing more formally, or asking for gift cards or wire changes, is a major signal.
- When in doubt, contact the sender through a known phone number or a fresh email. Never reply to the suspicious message.
A simple internal rule helps even more: if a message is asking for money, credentials, or a change in payment details, it gets verified by voice before action. That single habit blocks the majority of business email compromise attempts.
Realm Defense helps Ventura County small businesses train their teams, configure email filtering, and put reporting workflows in place so suspicious messages are caught and handled consistently. Reach out for a quick email security review.