Home › Guides

Is this email a scam?

How to tell, and what to do

Phishing emails pretend to come from a company you know to get your passwords or money. Most follow the same few patterns.

Common signs

• A problem with your account or payment information that you did not know about.
• Suspicious activity or login attempts that were not real.
• A request to confirm personal or financial information.
• An invoice you do not recognize.
• A generic greeting and a link to click to update your payment.
• A government refund you never applied for.

What to do

• Do not click links or open attachments.
• Check directly. If you have an account with that company, go to its website yourself or call a number you already trust.
• Report it. Forward phishing emails to reportphishing@apwg.org, and report at ReportFraud.ftc.gov.

If you already responded

Update your security software and scan for threats, change the passwords involved, and see what to do if you fell for a scam.

Sources

• FTC: How to recognize and avoid phishing scams

This guide is general information, not legal or professional advice. If money or personal information is at risk, contact your bank or card company right away.