Check the sender domain
Look beyond the display name. A sender name can say Bank Support, Delivery Team, or Account Security while the actual email address is unrelated.
Do not trust urgent buttons
Messages saying your account will be closed, payment failed, or parcel is blocked are common pressure tactics. Open the official website directly instead of clicking the email button.
Hover before clicking
On desktop, hover over links before clicking to preview the destination. If the link looks shortened, misspelled, or unrelated, do not open it.
Treat unexpected attachments carefully
Attachments from unknown senders can carry malware or phishing pages. If you were not expecting a file, verify through a separate channel first.