Protecting from Phishing

Phishing is one of the most common ways cybercriminals try to steal passwords, personal information, and company data.

Wise Group's security systems block thousands of threats every day, but some phishing attempts can still get through. That's why it's important to know what to look for and what to do if something doesn't seem right.

What Is Phishing?

Phishing is when someone pretends to be a trusted person or organisation to trick you into taking an action, such as:

• Clicking a link
• Opening an attachment
• Scanning a QR code
• Sharing sensitive information
• Approving access to your account

Scammers may claim to be from Microsoft, NZ Post, your bank, a supplier, or even a colleague.

Watch for the Warning Signs

Be cautious if a message:

• Creates urgency or pressure to act immediately
• Asks for passwords, MFA codes, or sensitive information
• Contains unexpected links or attachments
• Requests payment changes or banking information
• Pretends to be a trusted person or organisation
• Asks you to approve a login or action you didn't initiate

If something doesn't feel right, stop and verify before taking action.

Phishing Isn't Just Email

Modern phishing attacks can happen through:

• Emails
• Text messages (smishing)
• Phone calls (vishing)
• QR codes (quishing)
• Social media or messaging apps
• AI-generated messages that look legitimate

Unexpected MFA Request?

Multi-Factor Authentication (MFA) helps protect your account, but attackers may try to trick you into approving an unexpected request.

If you receive an MFA prompt you weren't expecting:

• ❌ Don't approve it
• ✅ Decline it
• ✅ Contact the Help Desk immediately

Only approve MFA requests when you're actively signing in yourself.

How to Stay Safe

• Hover over links before clicking them
• Never share your password or MFA code
• Be cautious of unexpected QR codes
• Verify unusual requests through a trusted channel
• Ask for help if you're unsure

Reporting Suspicious Emails

In Outlook, use the Report button on the Home ribbon.

• Report Phishing for emails attempting to steal information, credentials, money, or account access.
• Report Junk for unwanted spam or marketing emails.

If you're unsure which option to use, choose Report Phishing.

If You Clicked Something

Don't panic. Reporting it quickly is the most important thing.

• Contact the Help Desk immediately
• Don't try to fix the issue yourself
• Follow any instructions provided by the Help Desk

The sooner an issue is reported, the faster it can be investigated and contained.

Need Help?

If you're unsure whether something is legitimate or think you've interacted with a phishing attempt, contact the Help Desk immediately.

Email: helpdesk@wisegroup.co.nz