Phishing Email

Fraudulent emails designed to steal login credentials, financial information, or install malware.

Overview

Phishing emails are crafted to look like they come from legitimate organizations such as banks, government agencies, or well-known companies. They typically contain links to fake websites that harvest your credentials or attachments that install malware on your device.

Warning Signs to Watch For

Sender email address doesn't match the organization's domain
Generic greetings like 'Dear Customer' instead of your name
Spelling errors, poor grammar, or unusual formatting
Urgent requests to verify your account or risk suspension
Links that don't match the displayed text (hover to check)
Requests for sensitive information via email
Unexpected attachments, especially .exe, .zip, or macro-enabled documents

How to Protect Yourself

Verify sender email addresses carefully before clicking any links
Hover over links to see the actual URL before clicking
Never enter login credentials from an email link - go directly to the website
Enable two-factor authentication on all important accounts
Keep your email client and security software updated
Be suspicious of any email creating urgency around account security

What to Do If You're a Victim

1Don't click any links or download attachments
2Report the email as phishing to your email provider
3Forward the email to the Anti-Phishing Working Group at reportphishing@apwg.org
4If you clicked a link, change your password immediately
5Run a security scan on your device
6Monitor your accounts for unauthorized access

Common Targets

Office workersOnline shoppersBanking customersSocial media users

Have a suspicious contact?

Search our database to see if others have reported it.

Search Now

Disclaimer: The information on this page is provided for educational purposes only. It is not legal advice and should not be used as the sole basis for any decision. If you believe you are a victim of fraud, contact local law enforcement and the appropriate reporting agencies.