Slack phishing: social engineering in team chat
How suspicious requests appear in team chat and what to verify before following a link or instruction.
Start with the request
Social engineering often looks like a familiar task with an unusual reason to act quickly. Look for pressure, authority claims, unexpected links, requests for credentials, payment changes, or instructions to keep the request secret.
Make the cue visible
Instead of deciding only whether a message feels suspicious, name the tactic and quote the cue that triggered concern. That explanation makes it easier to pause and easier to teach someone else what to verify.
Verify outside the message
Use a known phone number, an official site you navigate to yourself, or a trusted colleague. Do not use the reply address or link supplied by a suspicious message as your only verification method.