• Tutorials
  • Courses
  • Tracks

Phishing Email Identification

Last Updated :
Discuss
Comments

Question 1

You receive this email:

From: [email protected]
Subject: Urgent: Unauthorized Login Detected

Dear User,
We've detected an unauthorized login attempt on your Microsoft account.
Please verify your identity immediately using the link below:
Verify Now

Failure to do so may result in permanent suspension.

Microsoft Security Team

What is the MOST likely indicator that this is a phishing email?

  • The email uses a generic greeting.

  • The message mentions account suspension.

  • The sender's domain looks suspicious.

  • The email contains a link.

Question 2

An email from [email protected] says:

We’re updating our payroll system.
Please download the attached Excel file and enable macros to ensure your payment is processed.

What makes this email suspicious?


  • It mentions payroll.

  • It asks to enable macros in an Excel file.

  • It uses a company domain.

  • It doesn’t have a link.

Question 3

This email comes from [email protected]:

Your account has been limited due to suspicious activity.
Please log in below to verify your details:
https://paypal-alerts.com/login

PayPal Support Team

Which action should you take FIRST?

  • Click the link and verify immediately.

  • Reply asking for confirmation.

  • Check the email headers.

  • Log into PayPal from the official website.

Question 4

An email from your manager's name (e.g., [email protected]) says:

Hey, I need you to buy 4 Apple gift cards worth ₹5,000 each urgently and send me the codes.
I’m in a meeting and can’t talk right now. This is urgent.

What’s your best next step?

  • Call your manager directly to verify.

  • Ignore the email completely.

  • Reply and ask why it’s urgent.

  • Buy the gift cards to stay safe.

Question 5

This email has perfect grammar and branding, appears to be from Google, and says:

We've updated our Terms of Service. Please review and accept the changes by logging in:
http://accounts.google.com-review.info

Which detail gives away the phishing attempt?

  • The grammar is too perfect.

  • The domain is misleading.

  • The layout is professional.

  • The tone is formal.

There are 5 questions to complete.

Take a part in the ongoing discussion