You clicked a simulated phishing link{{if .FirstName}}, {{.FirstName}}{{end}}

Key Takeaways — Spot Phishing Every Time

• Check the sender's actual email address, not just the display name. Attackers spoof display names easily.
• Hover before you click. Hover over any link to preview the real URL in your browser's status bar.
• Urgency is a red flag. "Your account will be suspended in 24 hours" is a pressure tactic designed to make you act without thinking.
• When in doubt, report it. Forward suspicious emails to your IT or security team. Never click a link to "verify" if something is real.
• If you clicked or entered credentials on a real phish: change your password immediately, notify IT security, and watch for unusual account activity.