- Read the real sender address, not the display name. Look for lookalike domains: an extra hyphen, "rn" instead of "m", .co instead of .com.
- Check where a reply would go. Click Reply and look at the address before typing. A different address, especially Gmail, means delete it.
- Hover over links (long-press on a phone) and read the real destination before clicking.
- Notice the pressure. Deadlines, secrecy, "don't call me", "your mailbox will be closed" are the classic signs.
- Unexpected attachment? Treat .html, .zip and "enable content" files as hostile.
- Any change to bank or payment details gets confirmed by phone, on a number you already had. Never by replying.
- A sign-in approval you didn't start? Deny it and tell us right away. Someone has your password.
Not sure? Don't reply to ask. In Outlook use Report > Report phishing, or forward it to help@sagesolutionsllc.net.
Already clicked or entered your password? Call (646) 886-7604 and press 1 now. The first 30 minutes matter and nobody will be upset with you.
Full guide: https://sagesolutionsllc.net/blog/how-to-spot-a-phishing-email/
Still stuck? Reply to your ticket or email help@sagesolutionsllc.net. Business down or a security issue? Call (646) 886-7604 and press 1.