Phishing emails try to trick you into clicking a link, opening an attachment, or handing over information. Learning the signs protects you and Nexus Group.
Warning signs
- Urgency or threats — “Your account will be closed in 24 hours!”
- Unexpected attachments or links, especially asking you to “verify” or “log in”.
- Slightly wrong sender addresses — e.g.
accounts@nexus-group-pay.cominstead of our domain. - Requests for passwords, payments or gift cards.
- Spelling and grammar mistakes, or a greeting that isn’t quite right.
What to do
- Stop. Don’t click links, open attachments or reply.
- Don’t enter your password anywhere you reached from the email.
- Report it using the Report phishing button in your email toolbar. If you can’t see it,
forward the email to
phishing@nexusgroup.example.com. - Delete the email after reporting.
If you already clicked
Don’t panic, but act fast:
- Disconnect from the internet if you can.
- Contact the Service Desk immediately (ext. 4357).
- If you entered your password, reset it right away.
Reporting early helps us protect everyone — you’ll never be in trouble for reporting a mistake.
Related policy: IT Security & Acceptable Use.