We have all received spam emails, text messages or telephone calls at some point in our life. These messages feel incredibly hooking, untrustworthy, and disempowering. But did you know that they are one of the primary tools attackers use to compromise our digital security and obtain access to the information on our device or in our organisation’s network? We examine this topic in depth offering understanding and practical examples of what to look for to understand if a message is true and trustworthy or not.