Be aware that the name displayed in the email may not match the actual email address. Always inspect the full email address to ensure it matches the organization’s official domain.
For example, an email from “CVS Customer Support” might show up as coming from CVSCustomerSupport@gmail.com. This is likely a phishing attempt, as legitimate companies typically use their official domain names (e.g., @cvs.com) for email communication.
Phishing emails often have a sense of urgency or use threatening language like “Your account has been compromised!” or “Immediate action required!” Legitimate companies are less likely to use scare tactics.
If the email promises something that seems too good to be true, like an unexpected prize, too large a refund, or an unbelievable deal, it’s likely a phishing attempt. Be cautious and avoid engaging.
Hover over any links in the email (without clicking) to see if the URL matches the sender’s website. Be wary of suspicious links or unexpected attachments, as they may lead to malicious websites or contain malware.
Be suspicious of emails asking for sensitive information, such as login credentials, Social Security numbers, or bank account details. Legitimate companies rarely ask for such information via email.
Phishing emails often contain spelling mistakes, awkward phrasing, or incorrect grammar. While some legitimate companies may make occasional errors, frequent mistakes are a red flag.
Be wary of emails that appear to come from an unfamiliar person or company, even if they seem to be from a known source. If in doubt, contact the company directly using their official contact information.
Phishing emails often have subject lines designed to grab your attention, such as “You’ve won a prize!” or “Important account information!” If the subject seems too good to be true, it probably is.
If you’re unsure whether an email is legitimate, contact the company or service provider directly using verified contact information from their official website or your account statements.
If you identify a phishing attempt, report it to the relevant organization (such as your email provider or the company being impersonated) and delete the message.
