# How can you tell that an e-mail is phishing?

Look less at spelling mistakes, which modern phishing rarely has, and more at what the message asks you to do. Warning signs: pressure to act now, a request to log in, pay, change bank details or open an unexpected file, a sender address that differs slightly from the real one, a reply-to address that goes somewhere else, and a link whose real destination, shown when you hover over it, does not match the company it claims to be. A message from a known colleague can still be phishing if their mailbox was taken over, so an unusual request is a reason to check through another channel, such as a phone call to a number you already have. If in doubt, do not click: report the message to IT and let them look. Reporting a false alarm costs a minute; ignoring a real one can cost far more.

FAQ: [Phishing and e-mail aftermath](https://netsenx.com/en/faq/phishing) · https://netsenx.com/en/faq/how-to-spot-a-phishing-email

## Read next

- https://netsenx.com/en/is-someone-inside-your-network
- https://netsenx.com/en/what-is-ndr

## Related questions

- [I clicked a phishing link. What should I do now?](https://netsenx.com/en/faq/i-clicked-a-phishing-link-what-now)
- [I entered my work password on a phishing page. What now?](https://netsenx.com/en/faq/i-entered-my-work-password-on-a-phishing-page)
- [An employee entered their password on a phishing page. What should we check on the network?](https://netsenx.com/en/faq/employee-entered-password-what-to-check-on-the-network)
- [How do you clean a computer after a phishing click?](https://netsenx.com/en/faq/how-to-clean-a-device-after-a-phishing-click)
- [After a phishing click, how do attackers get from one laptop to the rest of the network?](https://netsenx.com/en/faq/how-attackers-move-from-a-phished-laptop-to-the-network)