đŸ›Ąïž How to Spot a Phishing Email in 10 Seconds

Learn how to spot and stop phishing emails before they trick you—plus a simple inbox rule to keep your account safe.

Welcome to the very first edition of Tech Tip Twosday, where each Tuesday we drop one simple, powerful tip to make your digital life easier, safer, and more productive.

This week, we’re kicking things off with something that could save your data, your identity, and your sanity:

How to spot a phishing email in 10 seconds (or less).

đŸš© Why You Should Care

Phishing emails are one of the most common—and dangerous—forms of cyberattack. All it takes is one click on the wrong link, and boom: you’ve just handed over your login credentials, installed malware, or exposed your entire network.

But here’s the good news: spotting phishing attempts doesn’t require a degree in cybersecurity. You just need to slow down and look for a few key signs.

👀 3 Things to Check Before You Click

1. Check the Sender’s Email Address

Just because it says “Microsoft” or “Apple” as the display name doesn’t mean it’s legit.
Hover over or tap on the sender’s address to see the real domain.

If it looks weird, it probably is.

Always hover before you click. Phishing links may look legit, but the destination URL tells the real story.

Ask yourself:

  • Does the domain match the company name?

  • Is it full of random characters?

  • Does it use a strange extension like .xyz, .top, or misspelled domains?

đŸ§Ș Pro Tip: Use VirusTotal.com to scan links if you're unsure.

3. Look for Urgency, Errors, or Weird Formatting

Scammers want to trigger panic. That’s their move.
Things like:

  • “Your account will be deactivated in 24 hours”

  • Bad grammar or awkward phrasing

  • Logos or formatting that look just a little “off”

When in doubt, don’t click. Go directly to the official website instead.

🔐 Extra Layer of Protection

Want to go full pro? Turn on Multi-Factor Authentication (MFA) for your accounts. Even if you do get phished, MFA can stop attackers from logging in.

🧰 Tool of the Week: MailCheck (by Firefox/Chrome)

A free browser extension that helps flag shady links in emails and forms.
Download for Chrome
Download for Firefox

🧠 Quick Recap

Checkpoint

What to Look For

Sender

Is the email address legit?

Links

Do URLs match the expected domain?

Language

Is the tone panicked or poorly written?

📣 Share This Tip

Know someone who falls for “You’ve won a gift card!” emails a little too easily?
Send them this post. It might just save their inbox.

🧠 Bonus Tip #2: Set Up a “Quarantine” Folder to Catch Suspicious Emails

Even with spam filters, sketchy emails sometimes slip through. Creating a simple email rule can give you a second line of defense—without ever needing to click anything first.

đŸ“„ How It Works:

You create an email rule that automatically moves suspicious messages to a “Quarantine” or “Review First” folder based on red flags like:

  • Subject lines with “Urgent,” “Password,” or “Verify Account”

  • Messages with links AND attachments

  • Emails from external senders that mention money or login requests

This lets you review these messages safely—and on your terms—before interacting with them.

🔧 Set It Up In 2 Minutes:

In Gmail:

  • Go to Settings > Filters and Blocked Addresses > Create a new filter

  • Set keywords like “verify your account,” “login,” or “urgent”

  • Click “Create filter” and choose “Skip Inbox” → “Apply label” → [Create new: Quarantine]

In Outlook:

  • Go to Home > Rules > Manage Rules & Alerts

  • Create a new rule for subject/content matching specific phrases

  • Choose “Move it to a specific folder” and select your Quarantine folder

Now you’ve got an automated “shady inbox” to double-check before clicking anything risky.