Phishing emails try to trick you into clicking a link, opening an attachment, handing over your password or paying money to the wrong place. They're getting more convincing, so it helps to know the signs. If you spot one, report it.
Red flags to look for
- Urgency or pressure. "Your account will be closed today", "Pay this now", "I need this before my meeting".
- An unexpected request. An invoice you weren't expecting, a document shared by someone you don't work with, or a delivery notice for something you didn't order.
- A sender that's slightly wrong. Hover over or tap the sender's name to see the actual address. Look for misspellings, extra words or a free email address pretending to be a business.
- Links that don't go where they say. Hover over a link (don't click) to preview the real address. A sign-in link that isn't on a Microsoft domain is a big warning sign.
- A request for your password or an MFA code. Genuine IT teams and services won't ask you to send these by email or type them into a link from an email.
- Unusual attachments, especially ones asking you to "enable content", enter a password, or scan a QR code.
- Outlook warnings, such as a banner saying the sender is external or that you don't often get email from them.
A phishing email can come from a real account that's been compromised, so a familiar name isn't proof it's safe.
Payment and bank-detail change scams
One of the most costly scams in Australia targets payments. A supplier, client or even your manager appears to email saying their bank details have changed, or asking for an urgent transfer. Sometimes the attacker is replying inside a genuine email thread.
Before changing bank details or making an unusual payment, phone the person or business on a number you already know, such as one saved in your contacts or on a previous invoice. Never use the phone number in the suspicious email itself.
If a payment has already gone out, contact your bank immediately and call synfo on 1300 079 636.
Check before you act
- Pause. Urgency is the attacker's best tool.
- Don't click links or open attachments. Go to the website or app directly instead.
- Verify by phone using a known number if money, passwords or personal information are involved.
- If you're still unsure, forward the email as an attachment to support@synfo.com.au and ask.
The Australian Cyber Security Centre has more guidance at cyber.gov.au.
Still stuck?
If you've already clicked, entered your password or paid, call 1300 079 636 straight away and see what to do if your account is compromised.