Advice against phishing emails can be reduced to, "1: Never click on a link, call a phone number, download an attachment, or follow instructions you found in an email unless you were already expecting this exact email from this exact sender. 2: If you really want to do those things, search up the organization's website directly and use the contact info they provide there instead."

imo it's the ad-hungry articles stretching everything into 10+ pages that's making advice so inaccessible to people. Super annoying because it dilutes the real, simple message that's already there, it's just locked behind an adwall.