Upon a receipt of an email, do look out for possible tell-tale signs of a phishing email: (1) unknown email address/domain, (2) attachment with a potential malicious extension (e.g. xlsm, docm, exe, scr, vbs, or lnk), (3) use of urgent or threatening language. (4) hidden link, and (5) sign-off by dubious name or organisation.