How to spot a phishing email
Security · Sep 28, 2026
Most security incidents at an SME don't start with a sophisticated hacker, but with a well-disguised email and a hurried click. The good news: nearly all phishing emails share the same signs, and your team can learn to see them.
1. The sender doesn't add up
Look at the real address, not just the display name. An email claiming to be from "Your Bank" but coming from support@bank-secure-cr.com is a red flag. Attackers use look-alike domains with swapped letters.
2. Urgency and fear
"Your account will be suspended in 24 hours", "we detected unauthorized access". Phishing rushes you so you act without thinking. A serious institution won't pressure you like that over email.
3. Links that don't go where they say
Hover over the link (without clicking) and look at the real URL at the bottom. If the text says one site but the link points elsewhere, don't go in.
4. It asks for data or payments out of the ordinary
Passwords, verification codes, a supplier's bank-account change. For any request like this, confirm through another channel (a phone call) before acting.
What to do if you get one
- Don't click or open attachments.
- Don't reply.
- Report it to whoever handles IT, then delete it.
- If you already clicked or gave data, report it immediately: speed reduces the damage.
At LoTek we train teams with real simulations so this becomes a reflex. Write to us if you want to train yours.