A practical phishing prevention checklist for remote and hybrid teams: stronger MFA, password managers, payment verification, collaboration-app security, reporting, and a 30-minute response playbook.