How to Identify Phishing Emails

Inbox messages aren’t always what they seem. Phishing emails are on the rise, and learning how to spot the warning signs can help you avoid scams and keep your information safe.

What are phishing emails? Phishing (pronounced "fishing") is another form of online scam that involves sending emails that entice someone to click or share personal or sensitive information. The sender of the email will pretend to be from a well-known source. Phishing emails are also known as social engineering attacks.

What is a social engineering attack? Designed to manipulate consumers into providing sensitive information for financial gain.

Common Warning Signs

Cybercriminals are getting more convincing, but these common phishing tactics help you spot a scam quickly:

• Click Here Messages Emails urging you to click a link to “verify suspicious activity” often lead to fake websites designed to capture your login credentials. Once obtained, scammers may change passwords and contact information to lock you out of your account.

• Document Upload Requests Scammers may pose as trusted organizations, such as the IRS, and ask you to upload documents like W-2 forms. These documents contain sensitive information, including your Social Security Number and address.

Look at the Email Address

Cybercriminals will develop email addresses similar to sources that you have probably dealt with before, such as businesses, colleagues, family, or friends. Examine the email address before communicating. This should be completed even when you expect an email from a particular source. You can never be too safe.

Watch for Generic Email Greetings

Phishing emails tend to have generic greetings. For example "Dear Sir," or "Dear valued customer." Typically, when the sender knows you, they will refer to you by name.

Look for Unprofessional Behavior

It is not uncommon for phishing emails to contain threatening language to persuade consumers to act out of impulse. Here is an example that has circulated:

Dear valued customer, if overdue account balances are not paid, we will have no choice but to have you arrested. The issue can be resolved by sending gift cards, wire transfers, reloadable cards, and money transfer app payments.

Reporting Phishing Emails

Cybercriminals make navigating emails substantially more difficult with phishing. The Federal Trade Commission (FTC) accepts reports of potential phishing attempts at ReportFraud.ftc.gov. Phishing emails can also be forwarded to reportphishing@apwg.org.

The Realities of Phishing Emails

Phishing emails are an ongoing threat, making awareness and caution essential. Always question the legitimacy of unexpected messages, avoid clicking suspicious links, and never share sensitive information. If personal data such as Social Security numbers or credit card details may have been compromised, visit IdentityTheft.gov for step-by-step guidance on what to do next.