How to Spot a Phishing Email
Anatomy of a Phishing Email
Phishing emails have tell-tale signs. Learning to spot them takes practice but becomes second nature quickly.
1. Check the Sender’s Email Address (Not Just the Name)
The display name can say anything — “PayPal Support” or “Your IT Department” — but the actual email address reveals the truth. Look for:
- Misspelled domains:
support@amaz0n.com,no-reply@microsoft-security.net - Random characters:
hk72jx@gmail.com - Legitimate-looking but wrong:
apple@icloud-verify.com(not apple.com)
How to check: Hover over or tap the sender’s name to reveal the actual address. On mobile, tap the sender’s name once to expand it.
2. Look for Urgency and Pressure
Legitimate companies don’t demand you act within hours or face permanent account loss. Red flag phrases include:
- “Verify your account immediately or it will be deleted”
- “Unusual sign-in activity detected — act now”
- “Your payment failed — update your details today”
3. Inspect Links Before Clicking
Never click a link without first checking where it leads:
- On desktop: Hover your mouse over the link — the real URL appears in the bottom-left of your browser.
- On mobile: Long-press the link to preview the URL.
- Watch for URL tricks:
paypal.com.fake-site.ru(the real domain is fake-site.ru) - Shortened URLs (bit.ly, tinyurl) can hide malicious destinations — use a URL expander to check them first.
4. Watch for Generic Greetings
“Dear Customer,” “Dear User,” or “Dear Account Holder” suggests the sender doesn’t actually know who you are. Your bank knows your name.
5. Look for Poor Grammar and Spelling
Many phishing emails originate from non-English-speaking countries or are generated hastily. Look for awkward phrasing, spelling mistakes, and odd formatting.
6. Unexpected Attachments
Did you request this document? Phishing emails often carry:
- Fake invoices (.pdf, .docx)
- Malicious executables disguised as documents (.exe, .zip)
- Office files with embedded macros that install malware
Rule: Never open an attachment you weren’t expecting, even if it appears to come from someone you know.
7. Mismatched Branding
Blurry logos, outdated designs, wrong colors, or inconsistent fonts are signs of a fake. Compare with the real company’s website.
The SLAM Method (Quick Reference)
- Sender — Is the email address legitimate?
- Links — Do the URLs go where they claim?
- Attachments — Were you expecting this file?
- Message — Does the content make sense? Is it urgent or threatening?
When in Doubt — Don’t Click
Go directly to the company’s official website by typing the address yourself. Call the organization using a number from their official website — not a number provided in the suspicious email.
]]>