Cybersecurity and Phishing Spot Check

You get a password-reset email from a familiar tool, but the sender domain has one extra letter. What do you do?

Report it and open the tool directly

Check the domain before taking action

Ask IT if it looks legitimate

Click reset since the tool is familiar

A Teams message says, “Payroll file attached. Review before noon.” The attachment is a macro-enabled spreadsheet. Your move?

Verify payroll request through approved channels

Avoid macros and ask for confirmation

Preview it only if antivirus looks calm

Enable macros to view the file

A vendor invoice email links to a payment portal with a shortened URL. What feels right?

Report it and use saved vendor bookmarks

Expand or inspect the link first

Search the vendor name manually

Open the link since invoices are normal

Your “CEO” emails after hours asking for gift cards for a client emergency. What do you do next?

Verify by phone and report the email

Pause and check the request path

Reply asking for more details first

Buy them to avoid delaying leadership

A login page opens from an email link and asks for your MFA code twice. What happens next?

Close it, change password, alert security

Stop and access the site directly

Try again from a different browser

Enter the code until login works

You spot a suspicious email but you’re busy between meetings. What’s your realistic next step?

Use report phishing before moving on

Flag it and report after the meeting

Delete it to keep the inbox clean

Ignore it unless someone asks

On your phone, a delivery text says your package is held and includes a tiny link. What do you do?

Report it and use the carrier app

Check tracking from the official site

Tap carefully if the timing matches

Open it since mobile links are quick

A partner asks you to upload customer data to a new shared folder today. The request feels rushed. Your call?

Verify approval and data handling rules

Confirm the folder owner before upload

Share only a small sample first

Upload it to meet the deadline