---
title: (Not Always Obvious) Things to Look Out for to Avoid Phishing Scams
description: Phishing scams are incredibly common nowadays. Luckily anyone who uses a computer on a daily basis is now very used to ignoring the most obvious types of phishing emails. One of the downsides of peopl
image: https://blog.grantmcgregor.co.uk/hubfs/fishing.jpg
---
[](https://www.grantmcgregor.co.uk/)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
[Contact Us](https://grantmcgregor.co.uk/contact-us)
[Back to main](https://grantmcgregor.co.uk/knowledge-hub/blog)
Digital Transformation, Cyber Security
# (Not Always Obvious) Things to Look Out for to Avoid Phishing Scams
Grant McGregor Team
20 March 2017 • 5 min read
Phishing scams are incredibly common nowadays. Luckily anyone who uses a computer on a daily basis is now very used to ignoring the most obvious types of phishing emails with poor spelling or grammar in the content; not to mention that those that are sent out en masse will nearly always be caught by professional spam filters.
One of the downsides of people being warier of phishing scams, however, is that the scammers have become a lot more sophisticated over the years, with them going to great lengths in order to extort money from businesses and individuals.
If part of your job is corresponding on the phone or via email, then you need to be aware of the tell tale signs of a phishing scam so you can avoid falling victim to it.
Some companies now have a blanket policy of disciplining staff who click on phishing emails, and although it's debatable whether this is the best approach, you still want to take any precautions you can in order to avoid being at fault.
With this in mind, below are some typical signs of a phishing scam.
### 1. A Sense of Urgency or Scarcity
One very common tactic that scammers use when trying to extort money from a company is to create a sense of panic or urgency. They might call or email you posing as a senior person in the company, or as a representative of another company that yours does business with, saying that a certain amount of money has to be transferred immediately.
Many companies have fallen victim to this type of phishing scam since it often only relies on one weak link within the organisation for it to be effective.
If it sounds "phishy", it probably is, so check with someone senior or have a cross-check process in place to prevent this.
### 2. False Email Addresses
A very obvious yet also easy-to-miss sign of a phishing email scam is the use of a false or 'spoofed' email address that's very similar to that of somebody within your organisation. For example, a phishing email might come from john.smith@yourcompany.co.uk rather than johnsmith@yourcompany.co.uk. These small differences can be missed quite easily, especially since scammers will often use attention-grabbing email titles to draw your attention away from the email address itself.
If you smell a rat, check the email address display name is correct and if in doubt check the header too.
### 3. Reciprocation
Another common tactic that's used by phishing scammers is reciprocation. In practice, this is usually done by the scammer calling your company and offering to help in some way, usually by saying they're from your IT company or department. Or they may be from your 'bank' or other body... suggesting that there are some computers infected with a virus that hasn't been detected by the anti-virus software that's in place.
They will run you through some checks and after that they will usually ask for something in return, such as testing out a piece of software on the system. Because they have offered something first, people are often unsuspecting or hesitant to refuse, especially if they believe the person to be trustworthy.
### 4. Fake CEO Scam
The 'Fake CEO' or 'Bogus Boss' email phishing scam has cost companies millions over the last few years. The way this scam usually works is that a person, often the accountant or financial controller, will be called by somebody saying that the CEO or MD will be sending an email with instructions for a confident, and often “urgent”, transaction.
Fake CEO scams often happen very quickly and those who perpetrate it will often create a sense of urgency so the person at the company doesn't have time to think and consider that something unusual is going on.
Equally they can be a process that lasts many months to build rapport and trust before going for the kill with the real intention of defrauding you.
A lot of companies are now taking steps with clear processes or escalation for such requests to avoid this type of scam since it can be potentially devastating, especially for smaller companies who cannot afford to lose thousands of pounds.
### 5. Suspect Links in the Email Body
Although many phishing scams that target businesses are now very elaborate, that doesn't mean that old-fashioned phishing techniques aren't used too. There are still many emails that are sent to people within organisations in an attempt to have them log in to bogus but legitimate looking websites in order to obtain sensitive information, password details or to infect your machine.
If you use a professional Email Security Solution with "URL defense" then you will have far greater protection against this type of threat.
If you receive any emails with links in them, you should always be sure they're legitimate before clicking on them; particularly if they're from an email address that you don't recognise.
If you're concerned about security in your business, then Grant McGregor offer a range of IT support services for businesses and IT managers. Get in touch on 0131 603 7910 to find out more.
You can also download our FREE 15 Point Security Checklist [here.](https://www.grantmcgregor.co.uk/request-your-free-15-point-security-checklist/)
*Image source:* [Pexels](https://www.pexels.com/photo/activity-adult-bait-blur-294674/)
Grant McGregor Team
20 March 2017 • 5 min read
## Recent Posts
### Shadow AI: Is Your Business Ready for AI Adoption?
Understand shadow AI's impact on your business. Discover how to assess risks, improve processes, and adopt AI securely w...
[Read More](https://blog.grantmcgregor.co.uk/shadow-ai-is-your-business-ready-for-ai-adoption)
### Our Net Zero Target for 2040: What Can We Change?
From company vehicles and travel to suppliers and technology, see how Grant McGregor is working towards its net zero tar...
[Read More](https://blog.grantmcgregor.co.uk/our-net-zero-target-for-2040-what-can-we-change)
### What Is Penetration Testing? A Guide for Businesses
Learn what penetration testing is, how it works, what the report should include and when your business should consider a...
[Read More](https://blog.grantmcgregor.co.uk/what-is-penetration-testing-a-guide-for-businesses)
### Grant McGregor Recognised as a Leading Global MSP in the 2026 MSP 501
Grant McGregor has been named a Top Global Managed Service Provider in the 2026 MSP 501, ranking #1 Scotland-based MSP a...
[Read More](https://blog.grantmcgregor.co.uk/grant-mcgregor-recognised-as-a-leading-global-msp-in-the-2026-msp-501)
Union
## Empower your business with secure, expert-led solutions.
Talk to us about people-focused technology that drives results.
[Start a conversation](https://grantmcgregor.co.uk/contact-us)
Premium IT Services Tailored for Leading Brands
[Follow us on LinkedIn](https://www.linkedin.com/company/grant-mcgregor-ltd/) [Follow us on Facebook](https://www.youtube.com/itgrantmcgregor) [Follow us on Facebook](https://www.facebook.com/grantmcgregorltd/) [Follow us on Twitter](https://x.com/GrantMcGregorIT)
Quick Links
- [Home](https://grantmcgregor.co.uk)
- [About us](https://grantmcgregor.co.uk/about-us/our-story)
- [Knowledge Hub](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
Services
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
Edinburgh – Chesterfield
[0131 603 7910](tel:+441316037910)
[info@grantmcgregor.co.uk](mailto:info@grantmcgregor.co.uk)
**Main Office:**
The Merchants' Hall,
22 Hanover St,
Edinburgh EH2 2EP
© 2026
Grant McGregor. All rights reserved.
[Privacy and Cookie Policy](https://blog.grantmcgregor.co.uk/hubfs/UsefulDownloads/Policies/GRMC-SEC-Privacy-and-Cookie-Policy.pdf)
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Grant McGregor Team",
"url" : "https://blog.grantmcgregor.co.uk/author/grmc-team"
},
"dateModified" : "2020-06-02T07:03:26.316Z",
"datePublished" : "2017-03-20T14:10:19.000Z",
"headline" : "(Not Always Obvious) Things to Look Out for to Avoid Phishing Scams",
"image" : [ "https://blog.grantmcgregor.co.uk/hubfs/fishing.jpg" ],
"mainEntityOfPage" : {
"@id" : "https://blog.grantmcgregor.co.uk/2017/not-always-obvious-things-you-should-look-out-for-to-avoid-phishing-scams",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg"
},
"name" : "Grant McGregor"
}
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://grantmcgregor.co.uk/",
"@type" : "LocalBusiness",
"address" : {
"@type" : "PostalAddress",
"addressCountry" : "GB",
"addressLocality" : "Edinburgh",
"postalCode" : "EH2 2EP",
"streetAddress" : "22 Hanover Street"
},
"geo" : {
"@type" : "GeoCoordinates",
"latitude" : 55.9526313,
"longitude" : -3.1970679
},
"image" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg",
"name" : "Grant McGregor",
"openingHoursSpecification" : {
"@type" : "OpeningHoursSpecification",
"closes" : "18:00",
"dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ],
"opens" : "08:00"
},
"sameAs" : [ "https://www.facebook.com/grantmcgregorltd/", "https://x.com/GrantMcGregorIT", "https://www.youtube.com/itgrantmcgregor", "https://www.linkedin.com/company/grant-mcgregor-ltd/" ],
"telephone" : "+441316037910",
"url" : "https://grantmcgregor.co.uk/"
}
```