Phishing Email Checklist for Small Business Staff
Most breaches start with one rushed click. Use this checklist in onboarding and quarterly refreshers.
Pause before you click
- Unexpected invoices, W-2 requests, or gift card asks
- Links that do not match the real domain on hover
- Urgency + secrecy (“don’t tell the owner”)
- MFA prompts you did not initiate
If you already clicked
Disconnect from Wi-Fi if instructed by IT, do not enter more passwords, call us immediately, and do not delete evidence. Speed matters more than blame.
Owner responsibilities
MFA everywhere, least-privilege admin accounts, and a written “who can approve wire changes” process prevent most fraud attempts.
Need hands-on help in Kingwood or nearby? Call 832-224-1001 or request service online. For deep drive recovery we partner with Kingwood Data Recovery; for active ransomware emergencies see also Virus Pros.
FAQs
Is Microsoft 365 safe from phishing?
The platform is strong; users and misconfigurations are the weak point. MFA and training still matter.
Can you train our team?
Yes — short practical sessions beat hour-long slideshows.
Still stuck?
Local diagnostics from $65. Same-day options across Kingwood, Humble, and Atascocita.