How to Spot and Avoid Phishing Emails
Phishing emails try to trick you into giving away passwords, payment details or personal information. They often look like messages from a bank, a delivery company or a service you use. Knowing the warning signs is one of the best protections you have.
Common warning signs
- Urgent or threatening language, such as your account will be closed today
- A sender address that looks almost right but has small differences
- Generic greetings instead of your name
- Unexpected attachments or requests to confirm account details
- Links that lead to a different address than the text suggests
- Spelling and grammar mistakes, although better-written scams exist
Check before you click
Hover over a link on a computer to see where it really goes. On a phone, press and hold the link to preview it. If you are not sure, do not click. Open the company's website by typing the address yourself, or use its official app.
Look at the sender carefully
The display name can be anything, so check the full email address. Be careful with addresses that include extra words, numbers or unusual domains.
Never share sensitive information by email
Real companies do not usually ask for your password or full card number by email. If a message asks for this, treat it as suspicious.
Protect your accounts in advance
- Use a different password for every account, ideally with a password manager
- Turn on two-factor authentication where it is available
- Keep your browser and devices updated
If you already clicked or replied
- Change the password for the affected account right away, and for any other account that uses the same one
- Turn on two-factor authentication
- Check your recent account activity and bank statements
- Contact your bank immediately if you shared payment details
- Report the message to the company that was imitated and to your email provider
Report phishing
Most email services have a report phishing option. Reporting helps protect other people and improves spam filters.
A few seconds of checking before you click can prevent a lot of trouble. When in doubt, go to the official website yourself.
