Most attacks on small businesses start with one email. The good news: nearly all of them share the same giveaways.
Five signs to check
- The sender address does not match the company name
- It asks you to act fast or something bad will happen
- The link text and the real link do not match (hover to check)
- It asks for a password, a payment or a gift card
- The greeting is generic: “Dear customer”
When in doubt, do not click: call the sender on a number you already have. Owen, head of security operations
Clicked already? Tell IT straight away. Ten minutes matters more than embarrassment.

