Advice:

• Educate yourself and your team to recognize phishing emails and fraudulent URLs. Key indicators include poor grammar, urgency, generic greetings, and mismatched URLs.
• Encourage a skeptical mindset: if something feels off, investigate further before acting.

Guideline:

• Always verify the sender’s email address by checking the domain. For example, be wary of emails that superficially seem to come from trusted sources but have slight misspellings or anomalies in the domain.
• Avoid clicking on links or downloading attachments in unsolicited emails. Instead, navigate to the company’s official website from your browser if needed.