Phishing Email Examples: How to Spot & Avoid Dangerous Scams

Scammers send emails pretending to be from a legitimate company or organization you trust, such as your bank, a popular online store, a government agency, or a service provider.

The email often creates a sense of urgency, fear (e.g., account locked, suspicious activity), or offers something too good to be true (e.g., a prize, a refund, a job offer) to provoke a quick reaction.

It then prompts you to take an immediate action, usually by clicking a suspicious link, downloading an attachment, or replying directly with sensitive information.

Clicking the link usually leads to a fake website designed to steal your login credentials or personal data, while downloading an attachment can install malware on your device.

**Unusual Sender Address:** The email address might look similar but has subtle misspellings, extra numbers, or comes from a generic domain (e.g., '[email protected]').

**Generic Greetings:** Instead of using your name, the email addresses you with a generic phrase like "Dear Customer" or "Valued Member."

**Spelling and Grammar Errors:** Professional organizations typically proofread their communications; numerous typos or awkward phrasing are major red flags.

**Urgent or Threatening Language:** The email demands immediate action to avoid negative consequences (e.g., "Account will be closed," "Payment due today") or offers a limited-time deal.

**Suspicious Links:** Hover your mouse over any links (without clicking!) to see the actual URL. If it doesn't match the sender's official website, it's likely a scam.

**Requests for Sensitive Information:** Legitimate companies will never ask for your password, full credit card number, or Social Security number via email.

**Do Not Click Links or Download Attachments:** Even if you're curious, resist the urge. Clicking or downloading can compromise your device or lead you to a fake site.

**Verify Directly:** If you're unsure if an email is legitimate, contact the organization directly using official phone numbers or websites (don't use contact info from the suspicious email itself).

**Mark as Spam/Junk:** This helps your email provider learn to filter similar messages and prevents them from reaching your inbox in the future.

**Report the Email:** Forward the phishing email to the Anti-Phishing Working Group at [email protected], or to your email provider's abuse department.