Phishing works because it feels urgent. Someone wants you to click, open, or reply before you think.
For small businesses, that often looks like a fake invoice, a “Microsoft 365” password reset, a bank alert, or a shipping notice. The goal is usually the same: steal a login, get money moved, or drop malware.
Signs it’s phishing
- Pressure to act now — threats of locked accounts, missed payments, legal trouble.
- Sender doesn’t quite match — display name looks familiar; email domain doesn’t.
- Link mismatch — hover shows a different site than the brand claims.
- Unexpected attachments — especially when you weren’t waiting for a file.
- Credential asks — passwords, verification codes, remote-access tools, wire details.
- Off branding — wrong colors, blurry logos, odd wording.
- New reply-to address — replies go somewhere you’ve never used.
What to do instead
- Don’t click. Don’t open the attachment.
- Verify with a known phone number or a bookmark you already use.
- Report it to whoever manages your email (or us).
- If you already clicked or entered a password, change it and tell us right away — faster is better.
Panic Button Tech helps businesses with practical cybersecurity — Microsoft 365 / Google Workspace security, email issues, and the “wait, is this real?” moments.
IT problems? Hit the Panic Button. Call/text 951-501-8008 or Contact Us.