Account security · QUICK REFERENCE
Saving suspicious messages safely
Preserve enough information to explain a suspicious message without interacting with its links or attachments. A screenshot can show the visible claim; the original message can retain sender details. Keep both privately where appropriate and avoid forwarding active malicious content casually.
A practical checklist
- Capture the sender and date.
- Record the destination text without opening it.
- Use established reporting routes.
Putting it in context
A screenshot cropped to the logo loses the sender and wording that make the message useful to investigate. Capture context while redacting personal details in any public copy.
Keep in mind
Do not open an attachment merely to gather more evidence.
References & further reading
The checklist and examples are original editorial guidance. External links provide background within their stated scope; they do not validate an individual operator or case.
- NCSC: staying secure onlineUnited Kingdom · account-security guidance
- NCSC: phishing guidanceUnited Kingdom · suspicious-message guidance
About this edition: how the content is made · corrections & limitations