How to spot a phishing email or text
Simple checks that catch most fake emails, texts and calls before they cause damage.
Phishing messages try to trick you into clicking a link, opening an attachment, sending money or sharing a login. They often look like they come from a bank, a delivery company, Microsoft, Google or even your own coworkers.
Warning signs
- Urgency or threats: "your account will be closed today", "pay this invoice now"
- A sender address that does not match the company, or a display name that hides an odd address
- Links where the real web address (hover or long press to see it) is not the company's real site
- Unexpected attachments, especially invoices, zip files or documents that ask you to "enable content"
- Requests to change bank details, buy gift cards, or keep something secret
- Login pages reached from a link instead of from a bookmark or the app you normally use
What to do
- Do not click links or open attachments in a suspicious message.
- Verify using a phone number or website you already know, not one in the message.
- For payment or bank detail changes, always confirm by phone with a known contact.
- Report the message using your email's "Report phishing" option, then delete it.
If you already clicked
Act quickly. Change the password for the affected account from a trusted device, make sure MFA is on, and contact us. Call or text (407) 288-3972 or open a ticket and mark it urgent. Do not include passwords in the ticket.
Last updated Oct 31, 2026, 2:49 PM ET