Think Before You Click: How to Spot an Email Scam

Phishing emails remain one of the most common and costly ways criminals steal personal information. While scam emails have become more convincing, the warning signs are still there if you know what to look for:

Key Red Flags

• Strange sender addresses: The display name might look legitimate, but the actual email (after the “@”) often gives it away.
• Links that don’t match: Hover over any link to see where it really goes. If the URL looks odd or doesn’t match the company’s website, don’t click.
• Unexpected attachments: Banks, delivery services, and government agencies rarely send attachments out of the blue.
• Urgent or threatening language: “Act now!” “Your account will be locked!” Scammers use urgency to make you react before thinking.
• Poor grammar or formatting: Misspelled words, awkward phrasing, or mismatched logos can be a giveaway

Real Examples of Scam Emails

Example 1: The Fake Package Delivery

    Subject: Your USPS package is waiting for delivery confirmation.
    From: [email protected]
    Body: We attempted to deliver your package but need additional address details. Please confirm your information here: [Click to confirm].

 What’s wrong? USPS never sends delivery updates from non-official domains, and they don’t request address details through links. The URL looks convincing but isn’t from “usps.com.”

Example 2: The “Bank Alert”

    Subject: Urgent: Unusual Sign-In Attempt Detected
    From: [email protected]
    Body: We noticed a sign-in attempt from a new device. Please log in immediately to verify your account: [Secure Login].

What’s wrong? The sender’s email isn’t from “fivepointsbank.com,” and the link redirects to a fake login page designed to steal credentials.

Example 3: The Gift Card Request 

    Subject: Quick favor before my meeting
    From: [email protected]
    Body: Can you grab a few gift cards for a client right away? I’ll reimburse you later just send the codes here. Thanks!

What’s wrong? This common workplace scam impersonates a supervisor using a personal email address and urgency to trick employees.

How to Protect Yourself

• Confirm before you click. If something feels off, contact the company or person using verified contact information, not what’s in the email.
• Use updated software. Modern browsers and email programs block many phishing attempts automatically.
• Turn on two-factor authentication. Even if someone steals your password, they’ll need a second code to log in.
• Report suspicious emails. Deleting helps you, but reporting helps others avoid the same trap.

Scam Awareness Month Series:
This is week three of our October series. Check back next week as we explore phone call scams and how to stay in control when your phone rings.