ELENXOS SECURITY CENTER

How do I recognize a phishing email?

What is a phishing email?

A phishing email is a deceptive message designed to make you take an action, such as revealing passwords, entering payment-card details or opening a suspicious link. It often pretends to come from a bank, delivery company, public service or familiar online platform.

Inspect the sender carefully

The displayed sender name may show a familiar company while the actual email address is different. Open the sender details and inspect the full address. Even an address that looks correct is not proof of authenticity because sender spoofing and compromised accounts are possible.

Watch for urgency

A phishing email may claim that your account will be locked, a payment has failed or you must verify your details within minutes. Urgency is used to reduce careful thinking. Do not rush; verify the request through the organization's official app or website.

Do not automatically trust buttons and links

A button labeled 'Sign in' or 'Verify' may lead to a different website than expected. On a computer, you can inspect a link destination without opening it by hovering over it. On mobile devices, do not open unexpected links merely to discover their destination. Prefer the official app.

Passwords, OTPs and payment details

If an unexpected email asks for your password, a one-time verification code or complete card details, treat it as a serious warning sign. Do not reply with sensitive information or enter it on a page opened through that message. Verify the request through an official contact channel you found independently.

Fictional banking phishing example

Training example: 'Subject: Urgent account verification. Your access will be restricted within 48 hours. Click the verification button and enter your password and two OTP codes.' This example is fictional and does not refer to any specific bank. Warning signs include the threat of restricted access, time pressure and requests for secret codes.

Be cautious with attachments

An unsolicited email may contain a file presented as an invoice, receipt or document. Avoid unexpected attachments and do not enable macros or additional features just because the message asks you to. First confirm that you genuinely expected the file and that it came from a trusted source.

How to use the Elenxos Email Checker

You can use the Elenxos Email Checker to assess suspicious email text and available deception indicators. Before submitting a message, remove names, personal addresses, account numbers, passwords and other sensitive information. The result is advisory and does not conclusively prove fraud or authenticity.

What if you already disclosed information?

If you entered a password on a suspicious page, change it promptly through the official service and update any other accounts using the same password. Enable multi-factor authentication and check for unrecognized activity. If you disclosed payment-card or banking credentials, contact your bank immediately.

The safest way to verify a message

When you are unsure about an email, avoid the contact details and links included in it. Open the official app yourself, type the organization's known website address or call a number you have independently verified. Elenxos can help highlight warning signs, but independent verification remains important.

Elenxos evaluates risk indicators. CLEAN does not mean guaranteed safe.

Try an Elenxos checker →