Recognising phishing
A fake message imitates a bank, a delivery company, a public service or a colleague to get you to click, enter your credentials or pay. A few clues help you spot it, and one simple rule avoids most traps.
Kayzen Security editorial team3 min read
The most common scenarios
- The parcel on hold with “delivery fees” to pay.
- The bank account that is “blocked” or a transaction to approve urgently.
- A refund of taxes, health insurance or a fine.
- The fake technical support that displays an alert and a number to call.
- A message from a colleague or executive sharing a document to open via a link.
The clues to check
- The sender's real address and the domain name of the link (hover over the link without clicking on a computer, long-press on mobile).
- Urgency, a threat or an offer that is too good to be true.
- An unusual request: credentials, bank details, a verification code, installing software.
- A generic greeting, mistakes or sloppy layout — bearing in mind that very polished messages also exist.
- An unexpected attachment, especially if it asks you to enable macros or enter a password to open it.
The right reflex
Rather than judging each message, adopt a rule: never act from the message itself. If your bank, a delivery company or a public service contacts you, open their app yourself or type their usual address. If a colleague asks you for something unusual, check through another channel.
If you clicked or entered information
- Credentials entered: immediately change the account's password (and that of any accounts using the same one) and turn on two-factor authentication.
- Bank details entered: call your bank to block your card, and report a fraudulent card payment on the Perceval platform (service-public.fr).
- File opened or software installed: disconnect the device from the network and notify your IT support.
- In all cases: get help from 17Cyber and file a complaint if you have suffered a loss.
Report it to protect others
- Fraudulent text message: forward it free of charge to 33700.
- Fraudulent email: report it on Signal Spam.
- Scam website: you can also report it on the French government's Pharos platform when it involves illegal content.
- In a company: a reporting button or address known to everyone makes it possible to block the same message for colleagues.
Official sources
- Cybermalveillance.gouv.fr (new tab) — Assistance et prévention en sécurité numérique (fiches réflexes, prestataires ExpertCyber)
- 17Cyber (new tab) — Le réflexe en cas de cybermalveillance (Police nationale, Gendarmerie nationale, Cybermalveillance.gouv.fr)
- Signal Spam (new tab) — Signaler un courriel indésirable ou frauduleux
The resources cited are published by their authors in their original language. Kayzen is not affiliated with any of these organisations.
This guide is general and for information only. It does not replace legal advice or the help of an IT security professional.