Last updated: 3 October 2026
Short answer: check the sender’s real address, be suspicious of urgency or threats, hover over links before clicking, and never enter a password from an email link. If in doubt, contact the sender using a number you already trust, and report it.
What does a phishing email look like?
A typical phishing email: a lookalike sender, a threat, a vague greeting and a button that asks you to sign in.
What are the warning signs of phishing?
| Warning sign | What it looks like | What to do |
|---|---|---|
| Lookalike sender | An address that nearly matches a real brand, such as a zero instead of an o. | Click the sender name to see the full address. |
| Urgency or threats | “Account closed today”, “payment overdue”, “final warning”. | Slow down. Real organisations rarely demand action in minutes. |
| Generic greeting | “Dear customer” instead of your name. | Treat it as a flag, but know that targeted attacks do use names. |
| Links and login requests | A button that opens a sign-in page. | Go to the website yourself, rather than using the link. |
| Unexpected attachment | Invoices, voicemails or shared documents you did not expect. | Confirm with the sender by phone before opening it. |
| Change of bank details | A supplier or colleague asks you to pay a new account. | Always verify by calling a number you already hold. |
What should we do if someone clicks a phishing link?
- Do not panic and do not delete itTell your IT provider straight away, and keep the email as evidence.
- Change the passwordIf they typed one in, change it from a different, trusted device.
- Check MFA and sign-insReview recent sign-in activity and remove any unfamiliar devices.
- Look for forwarding rulesAttackers often add hidden rules to copy your email.
- Report itForward the email to report@phishing.gov.uk, the NCSC reporting service.
How can ABCOM protect our business from phishing?
ABCOM helps businesses across Sussex reduce phishing risk with email security, multi-factor authentication, staff awareness training and monitoring through Microsoft 365. Take our free Cyber Essentials readiness quiz or book a free IT review.
Sources and further reading
Want this looked after for you?
ABCOM has supported Sussex businesses and charities since 1996 and is an NCSC Assured Service Provider – Cyber Advisor (Cyber Essentials). Talk to a real person about your IT.
Also read
How ABCOM can help
Talk to a real person at our Burgess Hill office. We are an NCSC Assured Service Provider and have supported Sussex businesses since 1996.