**Problem:** Phishing emails are a common threat. They attempt to trick you into revealing sensitive information (passwords, credit card details, personal data) by masquerading as legitimate communications. This article provides guidance on recognizing phishing emails and what to do if you suspect you're a target.

**1. What is Phishing?**

Phishing is a type of cybercrime where attackers impersonate trusted individuals or organizations (like your bank, your boss, or a vendor) to steal your personal information. They often use deceptive emails, messages, or websites that look very convincing.

**2. Recognizing the Red Flags: How to Spot a Phishing Email**

Here are some common warning signs. **If you see ANY of these, be extremely cautious!**

*   **Suspicious Sender Address:**  Look closely at the sender's email address. Does it match the supposed sender?  A subtle difference (e.g., "sales@companz.com" instead of "sales@company.com") can be a giveaway.  *Hover over the sender's name to reveal the actual email address.*

    *   **Example:**  A legitimate email from your bank would likely come from an address ending in `@yourbank.com`. A phishing email might use a free email service (like @gmail.com or @yahoo.com) or a slightly altered domain.

*   **Generic Greetings:**  Many phishing emails use generic greetings like "Dear Customer" or "To Whom It May Concern." Legitimate companies usually address you by name.

*   **Urgent Requests & Threats:** Phishers create a sense of urgency to pressure you into acting quickly without thinking. They might threaten account suspension or demand immediate action. *Be wary of emails that say "Your account will be locked if you don’t act immediately!"*

*   **Poor Grammar & Spelling:**  While not always the case, many phishing emails contain grammatical errors and typos.  Professional organizations typically have strict quality control.

*   **Unsolicited Links & Attachments:**  Be cautious of links or attachments from unknown or unexpected senders. *Never click on a link or open an attachment unless you are absolutely certain it’s legitimate.*

    *   **Before clicking a link:** Hover your mouse over the link to see the actual URL. Does it look like a legitimate website? Is it shortened using a service like bit.ly? (Shortened URLs can hide the real destination.)

*   **Requests for Personal Information:**  Legitimate companies rarely ask for sensitive information (passwords, credit card numbers, Social Security numbers) via email. *Never respond to an email asking for this information.*

*   **Inconsistencies:** Does the email content or style conflict with what you would expect from the sender? Does the tone feel "off?"

**3. What to Do If You Suspect a Phishing Email:**

*   **Don’t Click Anything!**  Do not click any links or open any attachments.

*   **Report the Email:**  Forward the suspicious email (as an attachment, *not* just forwarding the email body) to the IT Security team at [Your Security Team Email Address - e.g., security@yourcompany.com].  In the subject line, write "Possible Phishing Email."

*   **Delete the Email:**  After reporting, delete the email from your inbox and trash.

*   **Alert Your Colleagues:**  If you think others might have received the same email, warn them.

*   **Do NOT Respond:** Do not reply to the email, even to ask if it’s legitimate.