What is spear phishing? Targeted email attacks explained
2 min read · Updated October 15, 2026
Spear phishing is a targeted phishing attack tailored to one person or organisation using personal details such as your name, employer or past purchases. Data from breaches makes these messages far more convincing. Verify unexpected requests through a separate channel and enable two-factor authentication.
How it differs from regular phishing
Regular phishing is mass-mailed and generic. Spear phishing is researched. The attacker may reference your job, a colleague’s name, a recent order or a service you use, making the message feel legitimate.
Where attackers get the details
- ✓Data breaches that reveal your email, name and the services you use.
- ✓Social media profiles and professional networks.
- ✓Company websites and press releases.
- ✓Previous compromised accounts that expose email threads.
Got a suspicious email about a leak?
Scammers love leaked data. See whether your address is genuinely in a known breach so you know how much of the message is real.
Typical targets and goals
Finance staff, executives and assistants are common targets because they can approve payments or access sensitive data. Individuals are targeted for logins, gift-card payments or personal information.
How to defend yourself
- ✓Verify unusual requests through another channel, such as a phone call to a known number.
- ✓Limit what you share publicly about your role and routines.
- ✓Use two-factor authentication so stolen logins are not enough.
- ✓Check whether your work and personal addresses have been exposed.
Frequently asked questions
What is whaling?+
Whaling is spear phishing aimed at senior executives.
Can spam filters catch spear phishing?+
Sometimes, but targeted messages are designed to look normal. Your judgement is the last line of defence.
Is it the same as business email compromise?+
Related. Business email compromise often relies on spear phishing to impersonate someone and redirect payments.
Stop guessing. Check your email in seconds.
The free Leakill check looks for your email address in known breach records and tells you whether it was exposed. If it was, an optional detailed report lists the incidents, dates, sources, the kinds of data involved and practical next steps. It is a one-off report, not a subscription.
A breach match is a warning signal, not proof that someone has access to your account today. No public database covers every breach, so a clean result lowers risk without guaranteeing safety.