STOP. THINK. CHECK. – How to Spot Online Scams
Cyber Security
Learn how to recognise phishing emails, fake Microsoft 365 alerts, WhatsApp scams and fraudulent payment requests. Simple cyber security advice for UK businesses.
2-minute awareness guide · By LinkedUp Communications
Cyber criminals impersonate colleagues, managers, suppliers and even Microsoft. Their emails, WhatsApp messages and websites can look genuine. You don’t need to be an IT expert. Just know what to look for.
1. Unexpected email? Don’t click.
SCAM DEMONSTRATION · NOT A REAL EMAIL
From: Microsoft Support <alerts@account-check.example>
URGENT – Your mailbox will be disabled. Verify your account within 2 hours.
Verify account & enter password
WARNING SIGNS: Suspicious sender address. Unexpected urgency. Requests to enter passwords.
SAFE ACTION: Not expecting it? Verify it first.
2. Microsoft asking for your password?
Scammers copy Microsoft 365 login pages. Watch for password expiry warnings, mailbox full notifications, unexpected shared documents and requests to reset your authenticator.
FAKE LOGIN · ILLUSTRATION ONLY
m365-verify.example · NOT MICROSOFT
Microsoft 365 sign-in?
Password: ••••••••
SAFE ACTION: Open www.microsoft365.com directly. Never enter passwords through unexpected email links.
Never share passwords or verification codes. Never approve unexpected authentication requests.
3. WhatsApp message from your boss?
WHATSAPP SCAM · DEMONSTRATION ONLY
Unknown number
Hi, it’s your MD. I’m using a temporary number today.
I’m in a meeting. I need you to arrange an urgent payment. Please don’t call.
WARNING SIGNS: Unfamiliar number. Urgent payment. Pressure not to call.
SAFE ACTION: Telephone the person on their usual number.
4. Supplier changed their bank details?
Criminals send convincing invoices. Even genuine supplier email accounts can be compromised.
PAYMENT FRAUD · ILLUSTRATION ONLY
INVOICE UPDATE: We’ve changed our bank details. Please pay this new account.
Call a previously trusted number before changing bank details.
One telephone call could prevent thousands of pounds being lost.
5. QR codes, AI and other tricks
QR-code scams
Unexpected QR codes can lead to fake login pages. Check before you scan.
AI impersonation
Scammers can generate convincing messages and imitate familiar voices. Verify unusual requests independently.
Professional-looking messages are not necessarily genuine.
6. Clicked something suspicious?
Don’t panic. Act quickly.
1. Stop interacting with the message or website.
2. Contact IT support immediately.
3. Explain what happened, including whether you entered a password.
4. Follow IT’s instructions to secure your account.
Reporting quickly can prevent a small mistake becoming a serious incident.
YOUR FOUR RULES FOR STAYING SAFE
STOP
Don’t rush into clicking or replying.
THINK
Is this normal? Were you expecting it?
CHECK
Verify using a trusted telephone number or website.
REPORT
Tell IT immediately if something seems wrong.
Technology helps. People make the difference.
Firewalls, antivirus, email filtering and multi-factor authentication help protect businesses. But no system stops every scam. Your awareness, good judgement and willingness to question unusual requests are essential.
If something doesn’t feel right, stop and check.
LinkedUp Communications Ltd
Supporting your people. Securing your business. Keeping you connected.
Talk to LinkedUp