The sign-in page is part of the story
Credential phishing attempts to obtain login information through a deceptive request or page. It may imitate an account notice, shared file, or session-expiration prompt.
Familiar branding is not an identity check
A recognizable logo does not explain who controls a page. The origin of the request, its timing, and the destination all matter. A password-expiration story can be used to push an immediate decision.
Use your own route to the service
Open an established bookmark or independently navigate to the service rather than relying on an unexpected message. If you already entered credentials, involve your IT or security team and use the service’s legitimate account-recovery controls.
Further reading: NCSC: phishing guidance. This external reference does not imply a partnership or integration.
Browse all resources