How to Spot Phishing Emails
Learn to identify phishing scams and protect yourself from email fraud.
🚨 Warning: Phishing emails are designed to trick you into giving away passwords, credit card numbers, or personal information. Stay alert!
What Is Phishing?
Phishing is when scammers send fake emails pretending to be from legitimate companies to steal your information.
Common Signs of Phishing
1. Suspicious Sender Address
Look closely at the email address:
- ❌ support@amaz0n.com (zero instead of 'o')
- ❌ paypal-security@gmail.com (not from paypal.com)
- ✅ support@amazon.com (legitimate)
💡 Pro Tip: Hover over the sender's name to see the actual email address!
2. Urgent or Threatening Language
Phishing emails create panic:
- "Your account will be closed in 24 hours!"
- "Urgent action required!"
- "Your payment failed - click here immediately!"
- "Suspicious activity detected!"
3. Generic Greetings
- ❌ "Dear Customer"
- ❌ "Dear User"
- ✅ "Dear John Smith" (uses your actual name)
4. Suspicious Links
Before clicking ANY link:
- Hover over the link (don't click!)
- Check the URL in the bottom left corner
- Look for misspellings: amaz0n.com, paypa1.com
- Check if it's HTTPS (secure)
⚠️ Never click links in suspicious emails! Go directly to the website by typing the URL yourself.
5. Requests for Personal Information
Legitimate companies NEVER ask for:
- Passwords
- Credit card numbers
- Social Security numbers
- Account PINs
6. Poor Grammar and Spelling
Many phishing emails have:
- Spelling mistakes
- Grammar errors
- Awkward phrasing
- Wrong company logos
7. Unexpected Attachments
Be cautious of:
- .exe files
- .zip files from unknown senders
- Invoices you didn't request
- Documents asking you to "enable macros"
Real Examples
Example 1: Fake Bank Email
From: security@bankofamerica-alert.com ❌
Subject: URGENT: Your account has been suspended!
Message: "Click here within 24 hours to verify your account or it will be permanently closed."
🚩 Red Flags:
Subject: URGENT: Your account has been suspended!
Message: "Click here within 24 hours to verify your account or it will be permanently closed."
🚩 Red Flags:
- Not from official domain (@bankofamerica.com)
- Creates urgency and fear
- Asks you to click a link
Example 2: Fake Package Delivery
From: delivery@fedex-tracking.net ❌
Subject: Your package couldn't be delivered
Message: "Download the attached label to reschedule delivery."
🚩 Red Flags:
Subject: Your package couldn't be delivered
Message: "Download the attached label to reschedule delivery."
🚩 Red Flags:
- Unexpected package notification
- Suspicious attachment
- Wrong domain
What to Do If You Receive a Phishing Email
DON'T:
- ❌ Click any links
- ❌ Download attachments
- ❌ Reply to the email
- ❌ Provide any information
DO:
- ✅ Delete the email immediately
- ✅ Mark it as spam/phishing
- ✅ Report it to your IT department
- ✅ If you clicked a link, change your password immediately
How to Verify Legitimate Emails
- Don't use links in the email
- Go directly to the company's website
- Log into your account
- Check for notifications there
- Call the company using a number from their official website
✅ Remember: When in doubt, don't click! It's always safer to go directly to the website.
What If You Clicked a Phishing Link?
Act fast:
- Change your password immediately
- Enable two-factor authentication
- Check your account for suspicious activity
- Contact the company's fraud department
- Monitor your bank statements
- Consider running antivirus software
Stay Safe
- 🔒 Use strong, unique passwords
- 📱 Enable two-factor authentication
- 🎓 Stay educated about new scams
- 🤔 Always think before you click
Need Help?
If you're unsure about an email or think you've been phished, contact our support team immediately!