Phishing and malicious email

What it is

Phishing is a message, email, text or call designed to trick you into handing over credentials, opening a malicious file or approving a payment. Stolen mailboxes are then reused to send convincing payment redirection requests that look like they come from a real supplier or contact.

How to protect yourself

• Turn on two-step verification on email and banking accounts.
• Treat any unexpected change of bank details in an email as unverified until confirmed by phone on a known number.
• Do not open attachments or click links in unexpected messages.
• Report suspicious emails to the National Cyber Security Centre via Suspicious Email Reporting Service.