A message that looks trustworthy
An email might appear to come from a colleague asking you to pay an urgent invoice, or link to a fake sign-in page. Spear phishing targets a particular person; smishing uses text messages.
Urgency can make people act before checking. The displayed sender name may be fake, and a link can hide its real destination.
Make it easy to check and report
Check unexpected requests through a contact method you already trust. Password managers and MFA can help protect accounts, while clear reporting routes help teams respond quickly. Anyone can be fooled, so blaming recipients is unhelpful.