Free Resource · Security

Phishing Check: 10 Things to Check Before You Click

Not sure whether an email or text message is genuine?

This free one-page Phishing Check gives you ten practical things to look at before you click a link, open an attachment, reply to a message or share personal information.

Designed as a quick reference you can save, print or keep nearby.

Free PDF · One page · No account required


What does the Phishing Check cover?

The checklist walks you through ten useful questions to ask when a message does not feel quite right — from checking the sender and inspecting unexpected requests to recognising urgency, suspicious links, attachments and attempts to obtain sensitive information.

It also explains what to do when you are still unsure and includes UK phishing reporting information.

  • Unexpected messages
  • Urgent or threatening requests
  • Sender addresses
  • Requests for sensitive information
  • Suspicious links
  • Attachments and QR codes
  • Emotional pressure
  • Inconsistent details
  • Independent verification
  • What to do when you are unsure

A simple rule when something feels wrong

You do not need to prove that a message is a scam before deciding not to interact with it.

If you are unsure, avoid clicking the link, opening the attachment or replying to the message. Instead, contact the organisation independently using contact details you already trust.


Want to understand phishing in more detail?

Read our practical guide to the warning signs of phishing emails and text messages, including how modern phishing attempts can appear convincing.

See also: What is phishing? in the Aurelle Glossary.


Free Download

Save the Phishing Check as a PDF reference to keep handy when something looks suspicious.

Download the free Phishing Check

Free PDF · One page · No account required