A practical guide to spotting a fake email at work
Workplace phishing rarely looks like the crude scams of a decade ago. An attacker can study your company website or LinkedIn profile and build a message tailored to your exact role, then wait for you to click. This guide covers the clues in your email client, your file-sharing habits, and the silent SPF, DKIM, and DMARC checks running in the background. Most importantly, it highlights the one habit that catches nearly every fake: always inspect the domain before you click. No technical background required, just take thirty seconds to look before you click.
