Ravindra BagaleCourses & study guides Track your progress

Guides Cyber safety for everyone

Phishing Emails for Everyone: Spot and Report

By , Cyber Security trainer LinkedIn Published: Last updated:

Phishing email tries to steal passwords or money with urgent stories and fake buttons. Do not use links or attachments in unexpected mail. Open the real site/app yourself, check the sender domain carefully, and report phishing in your email tool.

Quick steps

  1. Read unexpected mail without clicking.
  2. Check sender address spelling beyond the display name.
  3. Open official apps/sites yourself if action seems needed.
  4. Do not send passwords/OTPs by email reply.
  5. Use Report phishing in Gmail/Outlook/Apple Mail.

Why this matters

Marie in Paris nearly clicked a fake payroll reset. Imtiaz in Lucknow hovered on a link and saw a misspelled domain.

Logos are easy to copy. Domains and habits matter more.

What you need to know

Habits: hover/check links, type known URLs, no urgent money via email alone. Report: use your email provider’s report phishing.

Email caution

  • Unexpected attachment + urgency — High risk
  • Type bank URL yourself — Safer
  • Reply with passwords — Never

How to do it (step by step)

  1. Read unexpected mail without clicking.
  2. Check sender address spelling beyond the display name.
  3. Open official apps/sites yourself if action seems needed.
  4. Do not send passwords/OTPs by email reply.
  5. Use Report phishing in Gmail/Outlook/Apple Mail.
  6. If you clicked and typed a password, change it and enable 2FA now.

Example: Imtiaz spots a bad domain

Imtiaz saw paypa1-style spelling after hovering; he deleted and reported.

Marie opened payroll through the company SSO bookmark instead of the email button.

Both enabled 2FA on email the same week.

Common mistakes

  • Trusting display names alone.
  • Disabling spam filters.
  • Entering passwords to “see if the page looks real”.

Trusted places to check

Quick revision

  • No clicks on cold urgent mail.
  • Type known sites.
  • Report phishing.

Ravindra Bagale's Tip

Type the site yourself. Email links are optional — not mandatory doors.

Quick quiz: check what you learned

  1. Best response to an unexpected “reset payroll password” email?

    1. Ignore the button; open payroll via your usual bookmark or app
    2. Click the button so your pay is not delayed today
    3. Reply with your current password for faster verification
    4. Forward the email password link to coworkers to test
    Show answer

    A. Start from a known channel, not the email button.

  2. After you typed a password on a phishing page, you should…

    1. Change that password and turn on 2FA immediately
    2. Wait a month to see if anything bad happens first
    3. Reuse the same password on every other site for consistency
    4. Email the password to yourself as a reminder note
    Show answer

    A. Assume the password is stolen and rotate fast.

Learn more on this site

Short path above. These pages go deeper:

Frequently asked questions

What is this guide about?

It explains everyday safety for: phishing email everyday, fake invoice, link check. Plain steps, no IT jargon required.

What is the one rule to remember?

Check the real sender domain, do not open urgent attachments you did not expect, and use bookmarks for logins.

Do I need to be a cyber expert?

No. These steps are for parents, students, shoppers and anyone who uses a phone.

Where do I report if something already went wrong?

India: 1930 and cybercrime.gov.in. US: reportfraud.ftc.gov. UK: Action Fraud. Also tell your bank or the platform quickly.