A message asks you to fix a missed delivery, protect an account or approve something urgent. The trap may be the action it steers you towards: entering credentials, sharing information, opening a download, granting access or making a payment.
This is phishing when a deceptive message or site impersonates a trusted source to obtain information or actions. Encryption can protect your connection to the deceptive site without making its request honest. This lesson starts with verification; it does not require you to test a suspicious link.