Your progress is saved in this browser. There’s no timer.
Before you start
- A trusted contact route for the claimed sender
- The message left untouched while you check
A clear way through this guide.
We’ll show you one step at a time. When you’re ready, press Done — next step. You can go back or take a break whenever you like.
5 steps · Your own pace
Check a suspicious email before acting
Step 1 of 5: Pause before interacting
Do not open attachments, follow links, scan an included QR code or reply with personal information. Pause at urgency, threats, unexpected refunds or requests for codes.
✓ Step complete. You can practise it again.
Step 2 of 5: Inspect the request and sender
Look at the full email address and what the message wants you to do. A near-matching address, unexpected payment change or unusual request is suspicious. Correct spelling and a real-looking address do not prove authenticity.
✓ Step complete. You can practise it again.
Step 3 of 5: Check through another route
Open the organisation’s app yourself or type its known website address. Call a number from a statement or established contact record. For a friend’s request, contact them separately rather than replying to the message you are checking.
✓ Step complete. You can practise it again.
Step 4 of 5: Report and remove it
Use your mail service’s Report phishing or Report spam control. In the UK, forward suspicious emails to report@phishing.gov.uk when appropriate, then delete them. Do not follow any reporting instruction contained in the suspicious message itself.
✓ Step complete. You can practise it again.
Step 5 of 5: Act if you already responded
If you shared a password, change it through the genuine service from a trusted device. If financial information or money was involved, contact your bank promptly. Keep evidence and seek relevant support if you opened or installed something.
✓ Step complete. You can practise it again.
Take your time. Next marks this step done.
You’ve finished this guide.
Every step is complete. You can come back and practise again whenever you like.
Your small practice task.
Keep a paper note of the trusted route you use to contact your bank.
Completing the guide records your progress here; it does not check your device settings.
A common question.
Should I click Unsubscribe on suspicious mail?
Avoid interacting with a suspicious message. Use your mail service’s reporting controls; unsubscribe only from genuine services you recognise.
Official help, if you need it.
These links provide the product’s own instructions or relevant public guidance. Settings can differ by model and software version.