Trends
What screams ‘phishing scam’? Recognising unmistakable signs
One of the most recognisable signs of a phishing attempt is an email sender address that doesn’t match the identity.

Headline
One of the most recognisable signs of a phishing attempt is an email sender address that doesn’t match the identity.
Context
In today’s interconnected digital landscape, phishing scams continue to pose a significant threat to individuals and organisations alike. Recognising the unmistakable signs can mean the difference between falling victim to a cyber attack and maintaining secure digital practices. One of the most recognisable signs of a phishing attempt is an email sender address that doesn’t match the organisation it claims to represent.
Evidence
Pending intelligence enrichment.
Analysis
Phishing emails often use addresses that resemble legitimate domains but may have minor misspellings or extra characters. For example, an email claiming to be from “support@yourbank.com” might actually come from “support@yourbank-security.com”. These subtle differences are easy to overlook at first glance, making careful scrutiny essential. Legitimate organisations typically use consistent, professionally formatted email addresses for official correspondence. Therefore, if the sender’s address appears suspicious or unfamiliar, it’s prudent to verify its authenticity through other means before interacting with the email’s contents. Also read: Surge in ransomware attacks: Reasons and repercussions Also read: HKBN offers free phishing assessments to SPO
Key Points
- One of the most recognisable signs of a phishing attempt is an email sender address that doesn’t match the organisation it claims to represent.
- Phishing emails often employ generic greetings like Dear Customer or Dear User, instead of addressing the recipient by name. This lack of personalisation is a tactic used to cast a wide net, targeting a broader audience without knowledge of individual identities.
Actions
Pending intelligence enrichment.





