What is the best practice when an employee receives an email that appears to be from their bank asking for immediate verification of their login details?

What is the best practice when an employee receives an email that appears to be from their bank asking for immediate verification of their login details?
A . Reply directly to the email with the requested information to avoid account suspension
B . Ignore the email as banks do not contact customers via email
C . Contact the bank using a verified phone number to check the legitimacy of the request
D . Forward the email to a colleague to get their opinion

View Answer

Answer: C

Explanation:

Correct Answer. C. Contact the bank using a verified phone number to check the legitimacy of the request Contacting the bank directly via a verified phone number ensures that the employee does not fall prey to phishing by verifying the authenticity of the communication through secure means.

Option A is incorrect because replying directly to the email could lead to personal information being sent to phishers.

Option B is incorrect because while banks typically do not ask for sensitive information via email, ignoring the email does not confirm whether there is a genuine issue with the account.

Option D is incorrect because forwarding the email does not address the verification of the request and could potentially expose more people to the phishing attempt.