Phishing communications often include at least a telltale sign of illegitimacy, including unusual requests, inconsistencies in email addresses or web links, or an unfamiliar language or tone.