Symptoms
- Email looks mostly legitimate but something feels slightly off
- Urgent request for personal information or a password
- Generic greeting instead of your actual name
- Sender address looks close to a real company but not quite right
Likely causes
- CommonPhishing email designed to closely mimic a real companyModern phishing emails often use real logos and formatting copied from legitimate companies.
- PossibleLegitimate but poorly designed marketing emailSome real company emails are genuinely written in an urgent, sales-heavy tone that can resemble phishing at a glance.
What to do
- Check the sender's actual email address by clicking or hovering on the display name, not just what's shown at first glance.
- Hover over any links (without clicking) to see the real destination URL shown at the bottom of the screen or app.
- Look for generic greetings like 'Dear Customer' instead of your real name, which is common in phishing.
- Check for spelling and grammar issues, mismatched logos, or slightly wrong domain names.
- If the email claims to be from a company you use, log in directly through their official app or website instead of any link in the email.
- Search online for the exact subject line or wording, since known phishing campaigns are often reported by others.
- When still unsure, don't click anything and instead contact the company directly through a verified phone number or website.
When to call a pro
If you're still unsure after checking, most email providers or IT departments can review a forwarded copy of the email for you.
Safety
Generally low risk
Generally low risk for a careful person. Stop if anything looks different from what this guide describes.