I Think I Got a Phishing Email — What Do I Do?

Phishing emails are designed to trick you into giving up your password, clicking a malicious link, or installing malware. Here's what to do if you receive one. How to spot a phishing email: - Urgency or threats ("Your account will be suspended in 24 hours!") - Requests for passwords, credit card numbers, or personal information - Links that don't match the company they claim to be from (hover over the link to see the real URL) - Poor spelling or unusual formatting - Sender email address that looks off (e.g. [email protected]) - Unexpected attachments What to do if you receive a suspicious email: 1. Do NOT click any links or open attachments 2. Do NOT reply to the email 3. Do NOT call any phone numbers listed in the email 4. Report it — in Outlook, click the "..." menu on the email > Report > Phishing. This helps Microsoft block similar emails. 5. Delete the email What to do if you already clicked a link or entered your password: 1. Change your Microsoft 365 password immediately at portal.office.com 2. Call us right away at (269) 261-0269 — this is an emergency 3. We will audit your account for unauthorized activity and help secure it What NOT to do: - Don't panic, but do act quickly - Don't try to "reverse" a click on your own — call us The single biggest security improvement you can make is enabling MFA (multi-factor authentication). Even if your password is stolen, MFA prevents attackers from accessing your account.