An email scam is a message designed to make you click a malicious link, open an unsafe attachment, disclose information, or send money. Phishing is a common form of email scam.

• Unexpected messages that create urgency or fear.
• Links, attachments, or requests for credentials and payment details.
• Sender addresses, names, or writing styles that do not match the claimed organisation.
• Unexpected password-reset notices or messages sent from your account.

• Do not click unexpected links or open unrequested attachments.
• Verify requests using contact details found independently.
• Use a unique password, multi-factor authentication, spam filtering, and current software.
• If your account is compromised, change passwords, sign out other sessions, update recovery details, and scan your devices.