Is This Email a Scam? How to Identify Phishing and Spam Emails

Brand Identity & Security

That email in your inbox promising a prize, warning about your account, or asking you to verify information might be a scam. Phishing emails have become increasingly sophisticated, but there are still reliable ways to identify them before you become a victim.

Red Flags: Signs an Email Is a Scam

1. Urgency and Threats

Scam emails create artificial urgency:

• "Your account will be suspended in 24 hours!"
• "Immediate action required!"
• "You must verify your identity NOW"
• "Your payment couldn't be processed—update immediately"

2. Suspicious Sender Address

Look carefully at the "From" address:

Scammers use:

• Misspelled domain names
• Extra words added to domains
• Numbers replacing letters (paypa1 vs paypal)
• Different top-level domains (.net instead of .com)

3. Generic Greetings

Scam emails often use generic openings:

• "Dear Customer"
• "Dear Account Holder"
• "Hello User"
• "Dear Sir/Madam"

Companies you have accounts with typically address you by name.

4. Poor Grammar and Spelling

While scammers are improving, many still have:

• Awkward phrasing
• Spelling mistakes
• Unusual capitalization
• Missing or incorrect punctuation

5. Requests for Sensitive Information

Legitimate companies will NEVER ask via email for:

• Passwords
• Social Security numbers
• Full credit card numbers
• PINs or security codes
• Login credentials via a link

6. Suspicious Links

Before clicking any link:

1. Hover over it (don't click) to see the actual URL
2. Check the domain — Does it match the supposed sender?
3. Look for HTTPS — Secure sites use https://
4. Watch for URL shorteners — Scammers use them to hide destinations

7. Unexpected Attachments

Be suspicious of:

• Attachments you didn't expect
• Files with extensions like .exe, .zip, .scr
• Documents asking you to "enable macros"
• Files from unknown senders

8. Too Good to Be True

Classic scam themes:

• "You've won a prize!" (for a contest you didn't enter)
• "Inheritance from a distant relative"
• "Work from home and make $5000/week"
• "Free gift cards"
• "You're owed a tax refund"

How to Verify an Email

Common Scam Email Types

Account Verification Scams

What they say: "We noticed suspicious activity on your account. Click here to verify your identity."

Reality: They want your login credentials.

What to do: Go directly to the service's website and check your account there.

Package Delivery Scams

What they say: "Your package couldn't be delivered. Click to reschedule."

Reality: Links to malware or credential theft.

What to do: Track packages on the carrier's official website.

Invoice/Payment Scams

What they say: "Please find attached invoice #12345" or "Your payment of $299.99 was processed."

Reality: Attachments contain malware or links steal payment info.

What to do: Check your actual accounts for any charges.

Tech Support Scams

What they say: "Your computer has a virus! Call this number immediately."

Reality: They'll install malware or charge for fake services.

What to do: Ignore. Microsoft, Apple, etc. don't send unsolicited tech support emails.

Prize/Lottery Scams

What they say: "Congratulations! You've won $1,000,000!"

Reality: They'll ask for "processing fees" or personal information.

What to do: You can't win a lottery you didn't enter. Delete.

What If You Clicked a Scam Link?

What If You Gave Information?

If you provided sensitive information:

Passwords

• Change the compromised password immediately
• Change it on any other sites where you used the same password
• Enable two-factor authentication

Credit Card Numbers

• Contact your card issuer immediately
• Request a new card number
• Monitor statements for unauthorized charges

Social Security Number

• Place a fraud alert with credit bureaus
• Consider a credit freeze
• Monitor your credit reports

Bank Account Info

• Contact your bank immediately
• Monitor for unauthorized transactions
• Consider changing account numbers

Reporting Scam Emails

In Your Email Client

• Gmail: Click the three dots → Report phishing
• Outlook: Right-click → Mark as phishing
• Yahoo: Click the three dots → Report a phishing scam

To Authorities

• US: Forward to reportphishing@apwg.org and spam@uce.gov
• UK: Report to report@phishing.gov.uk
• FTC: Report at reportfraud.ftc.gov

To the Impersonated Company

Most companies have phishing reporting addresses:

• Apple: reportphishing@apple.com
• Microsoft: report@support.microsoft.com
• Google: Google has a phishing report form
• PayPal: spoof@paypal.com

Using Email Filters to Block Scams

Modern email providers have sophisticated spam filtering, but you can help:

1. Never mark scams as "not spam" — Trains your filter incorrectly
2. Always report phishing — Helps improve filters for everyone
3. Use the official "Report phishing" option — More effective than just deleting

Quick Reference: Scam vs Legitimate

When in doubt, don't click. Go directly to the company's website, call their official support number, and verify independently. A few extra minutes of caution can save you from identity theft, financial loss, and significant stress.

Related Articles