Anatomy of a Phishing Attack

Check the URL: The web address will be slightly different. Instead of "bankofamerica.com", it might be "bankofamerica-login.com" or "secure-bofa.net".
Look for a Padlock Icon: While scammers can get SSL certificates now, the absence of a padlock icon in the address bar is a huge red flag.
Poor Grammar/Spelling: Many phishing pages have minor spelling or grammar mistakes that a professional company would not make.

Most Common Phishing Lures

This chart shows the most common themes used in phishing emails. "Account Security Alerts" and "Fake Invoices" are incredibly effective because they create a sense of urgency.