How to Recognize Phishing Emails

Phishing emails are messages made to trick you into revealing personal information (like credit cards, bank numbers, passwords, the list can go on and on). Usually they follow patterns and once you know them, it’s easier to spot the signals.

1. What does it look like?

Imagine an email like this:

Subject: ⚠️ URGENT: Your Amazon Account is Suspended
From: [email protected]

Dear customer,

We detected suspicious activity in your account. Please click the link below to verify your information or risk account termination:

[Click here to secure your account]

Thank you,
Amazon Security Team

This looks scary and important, but it’s a scam.

1. Fake sender email -> the domain is [email protected] and the “o” is switched with a “0” instead. This is called domain spoofing—a common phishing tactic.
2. Urgent and threatening tone -> the message says your account is at risk and tells you to act fast or face “termination“. Scammers use urgent and “scary” language to create fear and make you click on the link without thinking.
3. Generic greeting -> The standard “Dear customer” greeting instead of your actual name. Real companies that have your account info (like Amazon) usually personalize emails.
4. Suspicious link -> The email includes a button that says “Click here to secure your account”, but the real link (if you hovered over it) might lead to a fake website that steals your login details.

Even though it looks like it came from Amazon, this email is trying to trick you into clicking a link that goes to a fake website. That fake site would likely ask for your Amazon password, credit card info, or other personal data.

2. The checklist

But how can I know if it’s a real email or a fake one? Simple, here is a list of things you should look for!

Just because it looks professional doesn’t mean it’s safe.

• Check the Sender’s Email Address
  • Is it from a real domain (e.g., @amazon.com, not @amaz0n-secure.com)?
  • Does it match the company’s official website?
• Look at the Greeting
  • Does it use your real name?
  • Does it use your real name?
  • ✅ “Hi Sarah,”
  • ❌ “Dear customer,”
• Hover Over Links (Don’t Click!)
  • Does the link go to a legit website?
  • Does it have weird spellings or a strange URL?
• Watch for Urgent or Scary Language
• Is it trying to panic you?
  • Is it trying to panic you?
  • “Your account will be deleted!”
  • “Immediate action required!”
• Check for Typos and Bad Grammar
  • Professional companies usually proofread.
  • Lots of mistakes = red flag.
• Unexpected Attachments
  • Be extra careful with attachments like .zip, .exe, or even .pdf.
  • Don’t download anything unless you’re expecting it.
• Too Good to Be True?
  • Promising gifts, refunds, or prizes you never signed up for?
  • 🚨 Probably a scam.
• Ask Yourself: Was I Expecting This?
  • Did you ask for this info?
  • Did you recently make a purchase or change your password?
• Don’t Trust Just the Logo
  • Scammers can copy logos and formatting.
  • Just because it looks professional doesn’t mean it’s safe.

Phishing remains one of the most common entry points for data breaches.

Stay safe online! 🔒 When in doubt about an email, don’t click any links. Instead, open your browser and manually visit the official website. Or contact the company directly through their official customer service channels. Remember: legitimate companies will never pressure you to provide sensitive information via email.

The best defense is staying vigilant—if an email feels suspicious, it probably is!