Scam Academy

Spot a phishing email

Check the real sender, the destination behind links and whether the message is trying to rush you into giving away access.

Start lesson All lessons

Warning signs

The display name looks familiar but the real sender domain does not match the organisation.
The message creates urgency: verify now, pay now, or lose access.
The link destination differs from the brand domain shown in the message.
The message asks for passwords, one-time codes or a sign-in through an unexpected page.

What to do

Do not use the link in the message. Open the organisation through its official app or typed address.
If you already entered a password, change it from the real service and end other active sessions.
Never approve an unexpected MFA or one-time-code request.

Test yourself

An email says your mailbox will be closed in 30 minutes and links to secure-mail-login.example. What is the safest next step?

Open the link quickly so the account is not closed. Open your mail provider through its official app or typed address and check the account there. Reply to the email and ask whether the message is real.

A correct quiz answer can be remembered on this browser only.

Put knowledge into action

Educational guidance is not a safety guarantee. Check current evidence before trusting an unknown message or address.

Check a suspicious item Recovery guidance