Phishing remains the number one way accounts get stolen, and the emails keep getting more convincing. The good news: almost all of them fail at least one of these seven checks.
1. Check the actual sender address
Display names lie; support@amaz0n-verify.com is not Amazon.
2. Hover before you click
The link preview at the bottom of the screen reveals the real destination.
3. Urgency is the weapon
"Account suspended in 24 hours" exists to make you skip thinking.
4. Generic greetings betray mass mail
Your bank knows your name; "Dear Customer" should raise eyebrows.
5. Attachments you did not expect
Invoices and delivery slips you never ordered are payload, not paperwork.
6. Look for the login trap
Real services rarely email login links; type the address yourself instead.
7. When in doubt, verify out-of-band
Call the person or company through a number you already have — not one from the email.
Enable two-factor authentication everywhere; it turns a stolen password from catastrophe into inconvenience.
