Phishing is a deceptive technique cybercriminals use to trick individuals into revealing sensitive information, such as login credentials, or installing malware on their devices. Sometimes they come from local businesses or organizations. These emails can be especially convincing because they exploit the trust and familiarity people have with these entities.
Remember that anyone’s email can be compromised, so if the email is from a legitimate source, it doesn’t mean that the cybercriminals don’t have control over that account. If there is an attachment or a link you are not expecting, verify the source by contacting that organization directly using a known and trusted method – meaning don’t call the phone number in the suspicious email, but look for their official website for contact information.