Four signs to look for, and what to do with it.
Phishing is an email, text or call that pretends to be from someone you trust, to get you to click a link, open an attachment, share a password or send money.
Signs to look for
- Pressure to act quickly, or a threat if you don't
- A request for passwords, payment, gift cards or bank details
- A sender address that doesn't match the name, or is slightly misspelled
- Links whose real address (shown when you hover) doesn't match where they claim to go
- An attachment you weren't expecting, even from someone you know
- A message that's out of character for the person sending it
- Perfect spelling doesn't mean it's safe: scammers now use AI to write convincing messages
How to report it
- On a computer (Outlook for Windows, Mac or the web): select the message, then select Report > Report phishing.
- On your phone (Outlook app): open the message, tap the three dots at the top right, then Report junk > Phishing.
Don't forward the email to colleagues, reply to it, or click links “to check.”
If you've clicked a link, opened an attachment or entered your password, call us on 707-755-8000 straight away, at any time. We'd much rather hear from you early. If you entered a password, we'll help you change it and check your account.
Could it be real? Don't use its links or phone numbers. Go to the website yourself, or call the person on a number you already have.
Not sure? Report it anyway. We'll let you know if it's safe.
