How do I Spot a Phishing Message? – darcy

Phishing is one of the most common and successful forms of cybercrime. Cybercriminals use emails, text messages, and even direct messages on social media or in video games to trick people into sharing personal information. Their success lies in deception, but your best defense is awareness.

You should forward any message you're not 100% confident in to ask@darcysecurity.com.

If the suspicious message appears to come from a person you know, contact that person via another means like by text message or a phone call to confirm it.

Here are a few other things to look out for:

Urgent Call to Action or Threats

Be cautious of emails or Teams messages urging you to click, call, or open an attachment immediately. Phishing attacks often create a false sense of urgency by claiming you need to act fast to claim a reward or avoid a penalty. This tactic is designed to make you react without thinking—or consulting someone who could warn you.

Tip: Whenever a message calls for immediate action, take a moment to pause. Are you sure it’s legitimate? Slow down and stay safe.

First-Time, Infrequent, or External Senders

Receiving emails or Teams messages from new or external senders is not unusual, but it can be a sign of phishing. If you get a message from someone you don’t recognize, or from a sender marked as [External], proceed with caution. Take extra care to scrutinize the message by applying the following checks.

Spelling and Grammar Errors

Professional organizations have teams to ensure their communications are polished. Obvious spelling or grammar mistakes in an email can be a red flag. These errors could indicate a scam, often resulting from poor translations or intentional attempts to bypass security filters.

Generic Greetings

Legitimate organizations usually know your name and personalize communications. An email that starts with a generic greeting like "Dear Sir or Madam" should raise suspicion. It’s a warning sign that the sender might not be who they claim to be, whether it’s a bank or an online retailer.

Mismatched Email Domains

If an email claims to be from a trusted company like Microsoft or your bank, but it’s sent from an unusual domain (e.g., Gmail.com or microsoftsupport.ru), it’s likely a scam. Watch for subtle domain misspellings too—like "micros0ft.com" (with a zero instead of an "o") or "rnicrosoft.com" (where "m" is replaced by "r" and "n"). These are common tricks used by cybercriminals.

Suspicious Links or Unexpected Attachments

If you suspect an email or Teams message is a phishing attempt, don’t click on any links or open attachments. Instead, hover your mouse over the link (without clicking) to check the real web address. Does the link match the address typed in the message? If the actual URL looks suspicious—such as a string of random numbers—it’s likely a scam.