Chapter 02Technology & Internet

How do I spot a phishing email?

Check the actual sender address (not the display name), hover over links before clicking to see the real URL, and treat urgency as a red flag — 'your account will be closed in 24 hours' is the classic pressure tactic. Real companies don't ask for passwords by email. When in doubt, go to the site directly instead of clicking.

Follow-up questions

What if I already clicked?

Don't enter anything. Close the tab. If you typed credentials, change that password and any reused versions immediately, and enable two-factor on the account.

Are texts and DMs phishing too?

Yes — 'smishing' (text) and DM scams are growing faster than email. Same rules: verify the sender, never click unexpected links, never share codes.

How do I report it?

Forward suspicious emails to your IT team or to reportphishing@apwg.org. Most email providers also have a 'Report phishing' button — it trains their filters.

Are texts safer than emails?

No — SMS phishing ('smishing') is growing fast.

People also search

  • check if email is real
  • report scam email
  • smishing examples
  • phishing examples
  • how to report phishing
  • smishing