PhishGlassPhishGlass by ReverseAI · Safety guide
How to Check for Phishing: Emails, Links and QR Codes
Phishing is a deceptive message or website designed to make someone reveal information, transfer money, or run harmful software. A familiar logo, convincing writing, or an urgent request does not prove that a message is genuine. The safest first step is to pause and verify the request through a separate, trusted channel.
What are the warning signs of a phishing email?
Look for unexpected requests for passwords, one-time codes, payments, or account recovery details. Threats of account suspension and promises of refunds are common pressure tactics. Examine the complete sender address rather than the display name alone. A recognizable sender name can be copied, and even a genuine account can be compromised. Good spelling is not evidence of safety.
Compare the request with what you expected. If a colleague suddenly asks you to change bank details, call them using a number you already know. Do not use contact details supplied only in the suspicious message.
How should you check a suspicious link or QR code?
Inspect the destination before opening it. Pay attention to the actual domain, not just a brand name somewhere in the address. For example, bank.example.com belongs under example.com; the word “bank” does not establish who operates it. HTTPS encrypts a connection but does not guarantee that a website is legitimate.
A QR code is another way to present a link. Preview its destination and be cautious of stickers placed over existing codes. When a message claims to come from your bank or another service, open its official app or use a trusted bookmark instead of following the supplied link.
What does a PhishGlass risk score mean?
PhishGlass analyzes submitted emails, messages, links, screenshots, and QR codes to provide an AI-assisted risk score from 0 to 100, a risk classification, and explanations of suspicious signals. Use these explanations to support your judgment, not replace independent verification. The score is not a verified probability that a message is malicious. A low score does not guarantee safety, and a high score is not definitive proof of fraud.
Context can be incomplete, particularly in cropped screenshots or short messages. Avoid submitting passwords, authentication codes, or unnecessary personal information. PhishGlass is an analysis aid, not a substitute for account security controls or professional incident response.
What should you do if you already interacted?
If you only opened a message, stop before clicking, replying, or downloading anything. If you entered a password on a suspicious page, change it through the official service and review active sessions. Enable multifactor authentication where available. If you shared payment details or transferred money, contact your financial provider promptly through a trusted channel.
If you downloaded or ran a suspicious file, or pasted a command supplied by a website, contact your IT or security team. Report the message using your email provider’s phishing-report option and preserve relevant evidence without forwarding dangerous links to others.