Real Examples of Phishing Emails and How to Spot Them
A message may appear to come from a regular supplier and include an invoice, overdue notice or payment change request. The goal is to make a familiar financial task feel routine.
The fake invoice
A message may appear to come from a regular supplier and include an invoice, overdue notice or payment change request. The goal is to make a familiar financial task feel routine.
Check the sender domain, the payment details and whether the request fits the supplier's normal process. Verify changes using a known phone number, not the contact details in the email.
- Unexpected attachments or payment requests
- Small changes in the sender address
- Pressure to act before a normal approval process
The Microsoft 365 sign-in alert
These emails claim that your account is locked, storage is full or a password needs to be reset. The button leads to a lookalike sign-in page designed to steal credentials and MFA approvals.
Never enter credentials after following an unsolicited link. Open your usual Microsoft 365 bookmark or contact your IT provider directly.
The executive impersonation
A message that appears to come from a director may ask for a gift card, urgent transfer or confidential document. Short messages and unusual tone are common because the attacker wants a quick response rather than a conversation.
Use a second channel to confirm unusual requests, even when the name and signature look correct.
Make reporting easy
Staff should not fear blame for reporting a suspicious message. A clear report button, short guidance and regular examples make it more likely that the first person who spots an attack will stop it spreading.
Technology helps, but a calm and repeatable checking habit is one of the strongest controls a small business can build.
Need help with your business IT?
Graphite IT can help you plan upgrades, strengthen security and make technology easier to manage.
Talk to our teamNeed help with your IT?
Get practical advice from the Graphite IT team.
