Memo : Phishing & trap messages

The most common traps (fake bank, fake parcel) and the key reflex: never click, check on the official site yourself.

When the attack knows you: personalized emails (your name, your employer), far harder to spot than the mass sends of level 1.

Phishing beyond email (SMS, WhatsApp, chat apps) where the usual cues (address, layout) are missing.

The fake site itself: recognizing a cloned login page once you've already clicked the link.

Pro techniques (thread hijacking, booby-trapped attachments, QR codes) that slip past the basic reflexes.