Key points
- Phishing = fake emails trying to steal credentials/data
- Look for: sender domain, urgency, unexpected links
- DMARC helps stop spoofing of YOUR domain
- Training your team is the #1 defense
How to do it
- Check the actual sender domain (not just display name)
- Hover links before clicking
- Never share passwords via email
- Enable 2FA on all accounts
- Report suspicious mail
Common mistakes
- Trusting display names
- Clicking links in urgent 'password reset' emails
- No 2FA
Secure email that fights phishing — freeNo card required — free forever up to 10 mailboxes.