Check emails carefully
Check where an email is coming from and the links that they provide. Often phishing emails do not include a user’s name but something generic such as “Dear Customer”.Reset passwords directly from sites
Always do a password reset through the actual site itself not via potentially false links in emails. Also, note that a secure website URL always starts withhttps
.
Here are some links for password resets on commonly-used sites: