Spot a phishing email in 10 seconds

Check the sender's actual address, not the display name (hover or tap it). Be suspicious of urgency ("act now or your account closes"), unexpected attachments, and links that don't match the company's real domain. Hover a link to preview where it really goes, and when in doubt, contact the sender a different way — never reply to the suspicious message.

Coach's tip: if it's about money or passwords, treat it as guilty until proven innocent.