AI at work · 2 MIN READ
How do you spot phishing when AI can write convincing emails?
Check what the message asks you to do and confirm unusual requests through a channel you already trust. A well-written email can still be a scam.
Look at the request
Pause if a message asks for a password, a new payment destination, an urgent signature or a file normally kept internal. Consider whether the request follows your usual process. A correct name, polished logo and convincing tone are insufficient to verify the sender.
Test with a practice invoice
A supplier appears to send new bank details. Call the number already in your supplier register and follow your procedure for changes. Do not rely on the contact details in the email for confirmation. For an unexpected sign-in request, open the service from your own bookmark instead of following the link.
Report with enough context
Use your workplace reporting route and say what the message asked you to do. If you clicked or entered information, report that straight away. It helps the responsible team decide whether to revoke access or check other recipients.
Sources
KEEP LEARNING
Courses on this subject
Planned courses. Material is in development.
