Security
Is this email a scam? How to spot phishing
"Is this real?" is one of the questions we get asked most. If you're unsure, don't click, don't reply, don't pay. Ask us first. That's always the right call.
Warning signs
- Urgency or threats: "your account will be closed today", "final notice", "payment overdue".
- Changed bank details: a supplier suddenly asking you to pay a new account. Always confirm by phone, using a number you already have (not one from the email).
- Unexpected invoices, bills or "documents shared with you" from people you don't deal with.
- Sign-in pages after clicking a link. Microsoft will never email you a link asking you to "verify" or "re-activate" your mailbox.
- The sender's address doesn't match the name shown, or is a free email account or a lookalike domain (for example a letter swapped or added).
- Domain or "SEO" renewal notices from companies you've never used. These are a very common scam aimed at business owners.
- Gift cards, crypto or "keep this confidential" requests, often pretending to be your boss.
- Threats claiming your email or website has a "security bug" and asking for payment to fix it.
What to do
- Don't click links or open attachments.
- Use Outlook's Report > Report phishing button (in new Outlook and Outlook on the web) if you have it, or just delete the email.
- If you're not sure, forward it to us in a ticket and ask. We're happy to check.
- Warn your colleagues if it looks targeted at your business.
Already clicked or entered your password?
Act straight away. See Think your account has been hacked, or you clicked a scam link?