How to Distinguish Between an Email That Is a Phishing Attempt & an Email From a Legitimate Business
You've just received an email from a reputable business, but the contents of the message seem a bit "off." This could actually be a phishing email from someone who wants to steal your private data, such as a password or bank account number, or install a virus on your computer. Phishing emails may at first appear legitimate, but most also give you at least one hint that the email was sent by a fraudster.
Phishing Emails Look Real
At first glance, phishing emails look much like any other email you may have received from a reputable company. The company logo is typically emblazoned at the top of the message, and the email often appears to be sent from someone in authority. The email's graphics, template and language are usually designed to look identical to a legitimate email sent from that company. If you're ever in doubt, compare the potential phishing email to a real one from the same company.
Poor Spelling and Grammar
One big tip-off of phishing emails is poor spelling and improper grammar. This is especially true when the email is sent from someone in a foreign country who isn't very familiar with the English language. Phishing emails might also use strange punctuation or misplaced capital letters. Not all phishing emails contain spelling errors, though, so just because an email is well-written doesn't mean that it's legitimate. Continue to look for other signs before you trust that the email is real.
Almost all phishing emails contain some kind of threat designed to spur you into action. The sender might threaten to close your account if you don't click on the link in the email, for example. Phishing emails sent to mimic a bank may tell you that your account has been hacked or your debit card information stolen, and urge you to click on the provided link to fix the problem. If your bank account information is ever really compromised, the bank will typically call you rather than send an email about it.
Links to Phishing Websites
The goal of all phishing emails is to get you to click on a link. The link is often cloaked to look legitimate, but when you click it, it redirects you to a different website. This website might be a shady online shop trying to gain business, or a malware site that infects your computer with a virus. To determine if a link is real or fake, hover your mouse pointer over it for a few seconds to see the actual link appear where you're pointing. If you're ever suspicious of a link, don't click it. Instead, type the URL into your browser's address bar yourself to ensure that you go to the correct site. Secure website URLs typically start with "https://", and a locked padlock icon at the bottom of your browser window lets you know that the site is encrypted for your safety.
- PhotoObjects.net/PhotoObjects.net/Getty Images