Security1 min read
Anatomy of a phishing email
The best phishing does not look suspicious — it looks routine. A field guide to the tells that survive even a convincing fake.
Anatomy of a phishing email
The best phishing does not look suspicious — it looks routine. A field guide to the tells that survive even a convincing fake.
Modern phishing is not full of typos. It is a pixel-perfect copy of a login page with a sense of urgency bolted on.
The tells that remain
- The link domain is almost right — one letter off, or an extra word
- Urgency: “act now or lose access”
- A login prompt arriving when you did not start a login
The habit that beats all of them
Never log in by clicking a link in an email. Open a new tab and type the address yourself. Two-factor and passkeys then catch what is left.
Attackers cannot copy the address bar. Train your eyes there, not on the message.