- Why are they sending you this email? Do you know or recognize the name or email address of the sender?
- Even if the email comes addressed to you and contains personal information, it still may not be legitimate, as this is a common tactic used by scammers to earn your trust. It’s better to focus on who is sending the message, rather than the personal details included in the message.
- You don’t know the sender personally nor has anyone vouched for them.
- The email is from someone outside of your organization but is unrelated to your role in the company.
- The email is from someone inside the organization, or a vendor but is unusual or out of character for you to receive an email from them. Instead, contact the sender directly to confirm they sent the email, and inform your IT department about your suspicions.
- Is the sender’s email address suspect, or from a suspicious or unfamiliar domain?
- Is this an unexpected or an unusual email from someone that you haven’t had contact with for a while that has hyperlinks or attachments?