Phishing emails and messages aren’t what they used to be. Gone are the days when you could spot them just by looking for broken English or weird formatting. Thanks to AI tools, cybercriminals can now create messages that are polished, personalized, and highly convincing.

This guide will help you recognize modern phishing tactics and protect your accounts, data, and our company.

1️⃣ Forget the Old “Bad Grammar” Rule

• Then: Phishing emails often had typos, awkward wording, or strange layouts.

• Now: AI can write flawless, professional-sounding messages in seconds — even mimicking a company’s tone of voice.
  

Tip: Don’t rely on spelling or grammar mistakes as your only warning sign.

2️⃣ Expect Personalized Scams

• AI can scrape public info (like LinkedIn, press releases, or company bios) to craft highly targeted messages.

• Emails might reference your job role, recent projects, or even coworkers by name.
  

Tip: Be extra cautious with any unexpected request that contains personal or company-specific details.

3️⃣ Watch for Emotional Manipulation

AI can fine-tune messages to push emotional buttons:

• Urgency: “Your account will be suspended in 2 hours.”

• Fear: “We’ve detected suspicious activity on your account.”

• Curiosity: “See the confidential file you requested.”
  

Tip: If a message tries to rush or pressure you, pause and verify before acting.

4️⃣ Check Links and Senders (Even if They Look Legit)

• AI can create near-perfect fake websites that copy real login pages.

• Email display names can be faked (“spoofed”) to look like someone you know.

      Tips:

1. Hover over links before clicking — check the real web address.
   
2. For any sensitive request, open your browser and navigate to the official website yourself (e.g., type in the company’s URL or use a saved bookmark) to check alerts or messages instead of clicking the link in the email.
3. For anything unusual, verify by calling the person directly or starting a new email thread from scratch.
   

5️⃣ Be Suspicious of Unexpected Attachments

• AI can generate fake invoices, resumes, or other “normal” documents with malicious code inside.
  

Tip: Only open attachments you were expecting, and confirm with the sender if unsure.

6️⃣ When in Doubt, Use the IT Safety Net

• If something feels off, it probably is.

• Forward suspicious emails to support@capta.zohodesk.com.au or use the Report Phishing button in Outlook.

• It’s always better to over-report than to click something dangerous.

🚫 Remember:

Phishing isn’t always obvious anymore.

• Don’t trust a message just because it looks polished.

• Don’t trust a sender just because the name looks familiar.

• Trust your gut, then verify.