The phishing message I want every new starter to recognise

Imagine a new starter receives this message on their second day:

Hi, I am in a meeting and need you to buy six gift cards immediately. Send me the codes when done. Do not call, I will explain later.

The message uses urgency, authority, and secrecy. Those are three reasons to pause.

Free phishing check

• Was I expecting this message?
• Is the request unusual for this person?
• Does it ask for money, passwords, or codes?
• Is the sender address really the one I know?
• Can I confirm through a second channel?

The safe response

Do not reply with information and do not click the link. Open the normal company system or call the person using a number you already trust.

You can say: "I received an unusual request from this account. I am checking it through our normal process before taking action."

Make it a learning activity

Show a team three messages: one normal, one suspicious, and one that needs more context. Ask learners to mark the clues and write what they would do next. Do not punish uncertainty. Use it to find the next lesson.

That is the kind of practical evidence Emply is built around. A learner demonstrates a safe decision, a planner sees where support is needed, and the employer gets a clearer picture than a completed slideshow.

The checklist is free. Use it in onboarding, share it with a colleague, and update it when your organisation’s reporting process changes.