How to stay safe from phishing emails

How to stay safe from phishing emails

Advice for Councillors using a council.gov.uk email address

Every councillor receives unwanted emails from time to time. These are often called phishing emails. Think of it like receiving junk mail through your letterbox. Someone has sent you an unwanted message, but they have not entered your home. Unfortunately, criminals send millions of these emails every day to organisations across the UK, including councils. The good news is that avoiding phishing is usually straightforward if you follow a few simple rules.

The Golden Rule

Never click a link or open an attachment unless you are confident you know who sent it and were expecting it.
If you're unsure, stop and check first.

Five Simple Checks

1. Were you expecting this email? If an email arrives unexpectedly asking you to log in, pay someone, open a document or provide information, treat it with caution.
2. Is it trying to make you act quickly? Phishing emails often say things like: "Your account will be closed today", "Immediate action required", "Payment overdue", "Your mailbox is full". Creating a sense of urgency is a common trick used by criminals.
3. Is it asking for personal information or passwords? Your council's IT provider, your bank and other legitimate organisations will never ask you to send your password by email. Never provide:
  1. passwords
  2. one-time security codes
  3. bank details
  4. payment card details
4. Don't trust a familiar name on its own. The name and logo can be copied. If something doesn't seem right, check before responding. 

5. If you're unsure, if an email doesn't feel right:
  1. Don't click any links.
  2. Don't open attachments.
  3. Don't reply.
Contact your Clerk or Parish Online support if you need advice.

It's always better to ask than to take a risk.

Receiving a phishing email does not mean your council has been hacked.
Think of it like receiving junk mail through your letterbox. Someone has sent you an unwanted message, but they have not entered your home.

Stop. Think. Check.

Those three simple steps will prevent the vast majority of phishing attacks from succeeding.


    • Related Articles

    • Has our email been hacked?

      If you've had an email through that is trying to get you to respond or help someone with buying something, you've not been hacked. This is known as Phishing. Every email address is like a postal address. Once someone knows your email address, they ...

    • Setting up Display Name Spoofing to avoid phishing scams

      In this video we cover how to set Display Name Spoofing protection for your email account. Guidance The most important piece of advice to avoid phishing scams or people pretending to be one of your staff or councillors is education. In your next ...

    • Why are my incoming emails being blocked?

      Your email system may be rejecting messages because of email security checks designed to prevent spam, spoofing, and phishing attacks. SPF is a security check used by email systems. It checks whether an email really came from the address it says it ...

    • Email Deletion & Recovery in Zoho Mail

      Overview Email deletion is a standard and necessary function within Zoho Mail, allowing users to manage inbox clutter, remove outdated information, and maintain an organised mailbox. However, it’s important to understand how deletion works and what ...

    • Forwarding emails from your gov.uk mailbox to another mailbox

      Overview Whilst it is technically possible to automatically forward incoming emails to another mailbox from your gov.uk email address, the Government Digital Service (GDS) strongly advise against this due to several key security and privacy risks. ...