Can you tell if an email is genuine?

Here are some tips from Barclays on how to keep your bank details safe. Can you spot a scam?

Even if you know all the hallmarks and what to look out for, with ever-more sophisticated ways to access your data, scams are getting harder to spot. If a fraudster called or emailed you or a member of staff pretending to be a known supplier, would you know it was a scam? They might even contact a staff member pretending to be you. For example, how can you tell if an email is genuine?

To help you and your staff spot fraudulent attempts, here are some tips on the checks and processes you should have in place. Remember - it's good to have a healthy level of suspicion.

If you get an email out of the blue that asks you to click on a link or attachment, don't do it - even if the sender seems familiar - and even if it appears to be coming from a known email address. Instead, contact the apparent sender using different details that you already know and trust to verify the request.

When someone calls unexpectedly, don't give them any information like personal details, bank details or PIN Sentry codes. Never download any software onto your device if you're asked to - fraudsters can use this to access your bank account. Instead, call them back on a known number to check they're genuine. For example, you can also search for 'Barclays phone checker' to see if a Barclays number you've been asked to call is genuine.

Have a payment-checking process in place. For example, if you receive a request to update the bank details you have on file or get new bank details for a payment, confirm this by calling that person or organisation using details you already have, and not those provided in the request. You should also do this with requests from anyone within your own organisation.

Have security policies in place, such as having strong passwords, using a VPN (virtual private network) when working from home, and using an extra layer of authentication for email and payment processes (such as a unique code texted to your mobile) - and test these processes often.