How to spot phishing

Phishing is fake email that pretends to come from someone you know: Microsoft, your bank, Posten (the Norwegian postal service) or a colleague. The goal is to trick you into giving away your password or card details, or into opening an attachment containing malware. More than nine out of ten successful attacks on businesses start this way.

Six signs of phishing

1. The sender address doesn't add up. The name may look genuine, but look at the actual address. “support@micros0ft-hjelp.com” is fake, “no-reply@microsoft.com” is genuine. Look for numbers in place of letters, extra words and unfamiliar domains.
2. It's unnaturally urgent. “Your account will be closed in 24 hours”, “Confirm now or lose access”. The pressure is designed to make you act without thinking.
3. The link goes somewhere else. Hover your mouse pointer over the link without clicking, and look at the address at the bottom of the browser. If it doesn't match what you expect, it's phishing.
4. Attachments you didn't ask for. Never open unexpected attachments, especially files ending in .exe, .zip, .docm or .xlsm.
5. Odd language. Grammar mistakes, strange wording or a mix of Norwegian and English.
6. They ask for your password or payment details. Neither Microsoft, your bank nor we will ask for your password by email. If someone does, it's phishing.

An example

The signs here: the wrong domain in the sender address, artificial urgency and a link to an unknown website.

Suspect phishing?

1. Don't click any links, and don't open any attachments.
2. Report the email in Outlook: right-click, select Report and Report phishing.
3. Delete the email, including from Deleted Items.
4. If you're unsure, call us at 38 27 80 00 or forward the email to support@digiserv.no.

Already clicked? See I clicked a suspicious link.