Read Online
Know the signs. Verify the request. Report quickly.
The following communication can be shared with employees as part of a regular security-awareness programme.
Recognize the Warning Signs
- Creates unusual urgency, fear or pressure.
- Requests passwords, OTPs, MFA approval or confidential information.
- Comes from an unfamiliar or slightly altered email address.
- Contains an unexpected attachment, QR code or shortened link.
- Requests payment, a bank-account change or gift-card purchase.
Use the STOP Method
- S — Study the sender: Check the complete email address and domain.
- T — Think about the request: Ask whether the message and requested action are expected.
- O — Observe links and attachments: Do not click immediately; inspect the destination.
- P — Prove it independently: Verify through a known phone number, website or separate channel.
Never Do These Things
- Never share passwords, OTPs, recovery codes or authentication information.
- Never approve an MFA notification you did not initiate.
- Never bypass a browser, email or security warning.
- Never use contact details contained in a suspicious message for verification.
If You Interacted with a Suspicious Message
Act immediately—do not wait or try to conceal the incident.
- Clicked a link — Close the page and report the incident.
- Entered a password — Contact IT and change it through the official portal.
- Approved an MFA request — Inform IT or the security team immediately.
- Opened an attachment — Disconnect the device from the network and contact IT.
Urgent CEO request?
Do not reply, make the payment or use the contact information in the message. Verify the request through a known phone number or another approved communication channel, and report the suspicious message.
Security habit of the monthUnexpected + Urgent + Sensitive = Stop and Verify
“Cybersecurity is a shared responsibility. Please remain alert, verify unusual requests and report suspicious messages immediately. A quick report can protect our people, information and organization.”
Organization signatory can be added during customization.
