Spot the Hook
Scan for urgency, fear, and impossible promises. Look closely at sender domains, mismatched names, and sloppy grammar. Inspect unexpected attachments and links that claim to fix a problem you didn’t know existed. Ask yourself, “Was I expecting this?” and “Do official channels match?” If anything feels inconsistent, stop. Copy the message to your secure reporting path. Building this reflex during breaks turns guesswork into careful verification, minimizing risky clicks under time pressure.