Spot a Phishing Email in 60 Seconds

Name: Nessco Tech Services
Address: Tampa, FL, 33602, US
Telephone: (813) 702-3155
Price range: $75-$125/hr

99% of breaches start with one click. Teach your team this 5-point check and cut your risk.

1. Inspect the sender — not just the name

Hover over (don't click) the sender name to reveal the real address. 'Microsoft Security <support-m365-verify.ru>' is not Microsoft. Watch for lookalike domains: micros0ft, rnicrosoft, or a Gmail address pretending to be your boss or vendor.

2. Hover every link before you click

Hover over buttons and links to preview the real URL in the corner. A 'View Invoice' button pointing to a random file-share or URL shortener is a red flag. When in doubt, open your browser and go to the site directly instead of clicking through.

3. Treat urgency + secrecy as the tell

'Wire $4,800 before 2pm, don't tell anyone' — every business email compromise uses the same recipe: authority (your CEO), urgency (today), and secrecy (keep this between us). Real executives don't ban you from verifying a payment by phone.

4. Verify through a different channel

Got an unexpected invoice, password reset, or gift-card request? Call the person at a known number or start a new email thread — never reply to the suspicious one. For vendors, confirm new bank details by phone using the number on their website, not in the email.

5. Report it, then delete it

In Outlook, use Report → Phishing so IT and Microsoft see it. Don't forward it around the office ('is this real?') — one curious click is all it takes. If you already clicked or entered credentials, change that password from a clean device and turn on MFA now.

Spot a Phishing Email in 60 Seconds — When to Call a Pro

Someone clicked and entered credentials, or a wire was sent — call immediately, we contain first and investigate second.
You want phishing simulation + training so staff learn on fakes instead of real attacks.
Suspicious login alerts, new inbox forwarding rules, or mail flow rules you didn't create.

Get help with this (813) 702-3155

Guide FAQ

Filters catch most bulk spam but the targeted one-to-one CEO-fraud emails sail through because they contain no malware links — just words. Training plus MFA covers what filters miss.

Disconnect the device, change the password from a clean device, revoke active sessions, and check for forwarding rules. Then call us — we handle containment, mailbox review, and documentation.

Yes — simulated phishing, 20-minute staff training, and MFA rollout bundled for small businesses. Remote work starts at $75/hr, and most teams are covered in a single session.

Was this guide helpful?

Keep going on Virus & Security Cleanup

Think You Have a Virus? Remove Malware Safely5 min read Set Up a Password Manager in Your First Hour5 min read Passkeys Explained4 min read

Related service: Virus & Security Cleanup →