The warning signs
- It's urgent or scary. “Your account will be closed today.” “Payment failed.” “Unusual sign-in detected.” Pressure to act right now is the most common sign.
- The sender's address doesn't match. The name may say your bank, but the email address after it is a different or misspelled domain. On a computer, hold the mouse over the sender's name to see the full address; on a phone, tap the name.
- The link goes somewhere else. Hold the mouse over a link without clicking (on a phone, press and hold) to see where it really goes. If the address isn't the company's real website, don't click.
- It asks for passwords, codes or payment details. Be very wary of any email that asks you to “confirm” or “verify” your password, a sign-in code, or card or bank details by email or through a link.
- It has an attachment you didn't expect, especially an invoice, a “document” or a zipped file from someone you don't know, or from someone you know who doesn't usually send them.
- It asks for gift cards, a wire transfer or a change of bank details, even if it seems to come from your boss, a coworker or a supplier.
- The greeting is generic or the writing feels off: “Dear customer”, odd wording, or a logo that doesn't look quite right.
One sign on its own doesn't prove an email is fake, and a fake email can look perfect. When in doubt, treat it as suspicious.
What to do with a suspicious email
- Don't click links, open attachments or reply.
- Check another way. Contact the company or person using a phone number or website you already know, not one from the email.
- Report it. At work, tell whoever handles your IT. Most email programs also have a “Report phishing” or “Report junk” option.
- Delete it.
If you already clicked or replied
Don't be embarrassed: these emails are designed to fool people. Act quickly:
- Change the password for the account involved, from the real website or app, not from the email. If you use the same password anywhere else, change it there too.
- If you gave card or bank details, call your bank or card company straight away, using the number on your card or statement.
- If you opened an attachment or installed something, disconnect the computer from the internet (turn off Wi-Fi or unplug the network cable) and call us.
- At work, tell your IT contact right away, even if nothing seems wrong.
Need help?
If you think a phishing email got through, call us and we'll help you check your computer and accounts. Call (936) 280-0919, Monday to Friday, 9 AM to 6 PM.