Whaling emails are crafted utilizing advanced social engineering tactics to target and deceive users; however, there are various best practices that individuals should implement which will increase their chances of recognizing these dangerous emails:

  • Evaluate the sender’s email address:Does it look correct? Are there added letters and/or numbers within the username? Does it use the correct domain?
  • Check for spelling and grammatical errorsin the subject line and the body of an email. Errors can indicate that an email is not authentic. Also, keep an eye out for suspicious subject lines and signatures.
  • If an email appears suspiciousin any way, make a phone call to the sender to confirm the legitimacy of the message.