Email scams are one of the most common cyber threats in the workplace. They often appear to come from a trusted source, such as a manager, colleague, supplier, or well-known organisation, and are designed to trick recipients into clicking a link, opening an attachment, or sharing sensitive information.

Common workplace email scams include phishing emails, fake invoices, urgent payment requests, and messages asking you to “confirm” login details or reset passwords. These emails frequently create a sense of urgency or pressure, hoping you’ll act before thinking twice.

To stay safe:

• Always check the sender’s email address carefully

• Be cautious of unexpected attachments or links

• Watch for urgent language or unusual requests

• Verify payment or data requests through another channel

• Report suspicious emails to your IT or security team

Staying alert and taking a moment to verify emails can help protect both you and your organisation from costly cyber incidents. Cybersecurity starts with awareness.