Which phishing tactic helps attackers appear legitimate?

• A. Disabling images.
• B. Using logos and formatting to convey authenticity.
• C. Sending only from internal IP address.
• D. Including strong technical jargon.

Answer: (B)

Using logos and formatting to convey authenticity is effective because it directly leverages brand recognition to build trust. When a message visually mirrors a familiar organization—same logo, color scheme, fonts, and layout—the recipient instinctively treats it as legitimate and is more likely to engage without scrutinizing details like the sender domain or security indicators. This visual mimicry lowers the barrier to trust, which is exactly what attackers want in a phishing attempt.

Disabling images can actually reduce this effect, since logos and visuals won’t render. Sending only from an internal IP address might raise suspicion or fail domain checks even if the message looks internal, and it doesn’t inherently create a convincing brand image. Including strong technical jargon can come across as forced or suspicious if overdone, whereas polished branding is a more universally persuasive cue.