You do not have time to study every email for 10 minutes. You are a healthcare worker. You have patients to see.
But you can learn to spot fake emails in 5 seconds. Really.
This guide shows you 5 simple checks. Each check takes one second. Do them in order. You will catch almost every phishing email.
The 5-Second Checklist
Second 1 – Who sent it?
Look at the sender’s email address. Not the name. The actual address after the @ symbol.
Example:
Name: Dr. Sarah Johnson
Address: [email protected] (fake)
Real address: [email protected]
Second 2 – What do they want?
Do they want you to click a link, open an attachment, or share a password? Real organisations rarely ask for these things by email.
Second 3 – Does it feel urgent?
"Act now", "Your account will close", "Immediate action required" – these are pressure tactics. Hackers want you to rush.
Second 4 – Are there spelling errors?
Big brands and healthcare organisations check their emails. Mistakes = fake.
Second 5 – Does the link look safe?
Hover your mouse over any link (do not click). Look at the bottom left of your screen. Does the web address match the company?
Practice With Real Examples
Example 1 (Fake)
From: IT Security Team [email protected]
Subject: Password verification needed
Message: "Your password expires in 24 hours. Click here to keep it."
Check 1: @hospital-secure.net is not the real domain.
Check 2: They want a click.
Check 3: "24 hours" is urgency.
Check 4: No spelling errors, but the domain is wrong.
Check 5: Hover the link – it goes to a .ru website.
Verdict: Fake.
Example 2 (Real)
From: Scheduling Department [email protected]
Subject: Your shift for Friday
Message: "Please check the attached schedule for any changes."
Check 1: The domain matches.
Check 2: An attachment. Possible but low risk.
Check 3: No urgency.
Check 4: No errors.
Check 5: No links.
Verdict: Likely real. But still be careful with attachments.
One More Trick: The Reply Test
If you are not sure, try to reply. A real email address will not bounce back. A fake one often will.
But do not reply if you suspect phishing. Just delete it.
What If the Email Looks Perfect?
Some phishing emails are very good. They copy logos, signatures, and language exactly.
In that case, do this: Contact the sender using a different method. Call them. Send a new email using your address book. Ask "Did you just send me something?"
Learn More in Our Course
We go deeper in our Phishing Awareness for Healthcare Workers CPD course. You get video examples, quizzes, and printable checklists.