Spot and report a phishing or scam email
IT Processes · 1 views
Phishing emails try to trick you into giving up your password, an OTP, money, or into opening a harmful attachment.
HOW TO SPOT ONE
• Urgency or threats — "your account will be closed", "pay now", "act within 1 hour".
• A sender address that doesn't match the name, or a lookalike domain (iksuIa.com with a capital i, gooogle.com, etc.).
• Links that don't go where they claim — hover over a link to see the real address before clicking.
• Unexpected attachments (.zip, .html, invoices you didn't expect).
• Any request for your password, OTP/2FA code, bank details or gift cards — Iksula IT and HR will NEVER ask for these by email.
WHAT NOT TO DO
• Don't click links or open attachments in a suspicious email.
• Don't reply, and don't share your password or OTP with anyone.
• Don't scan unexpected QR codes in emails.
HOW TO REPORT IT
• In Gmail, open the message > three-dot menu > "Report phishing".
• Forward it to [email protected] so IT can warn others.
IF YOU ALREADY CLICKED OR ENTERED YOUR PASSWORD
• Change your Google password immediately (myaccount.google.com), and turn on 2-Step Verification.
• Tell IT right away by raising a ticket — quick action limits any damage.
• If you ran a downloaded file, see "Got a virus or 'malicious activity' warning? Do this immediately".
HOW TO SPOT ONE
• Urgency or threats — "your account will be closed", "pay now", "act within 1 hour".
• A sender address that doesn't match the name, or a lookalike domain (iksuIa.com with a capital i, gooogle.com, etc.).
• Links that don't go where they claim — hover over a link to see the real address before clicking.
• Unexpected attachments (.zip, .html, invoices you didn't expect).
• Any request for your password, OTP/2FA code, bank details or gift cards — Iksula IT and HR will NEVER ask for these by email.
WHAT NOT TO DO
• Don't click links or open attachments in a suspicious email.
• Don't reply, and don't share your password or OTP with anyone.
• Don't scan unexpected QR codes in emails.
HOW TO REPORT IT
• In Gmail, open the message > three-dot menu > "Report phishing".
• Forward it to [email protected] so IT can warn others.
IF YOU ALREADY CLICKED OR ENTERED YOUR PASSWORD
• Change your Google password immediately (myaccount.google.com), and turn on 2-Step Verification.
• Tell IT right away by raising a ticket — quick action limits any damage.
• If you ran a downloaded file, see "Got a virus or 'malicious activity' warning? Do this immediately".
phishingscamsuspicious emailspamfraudreportsecurityspoof