How to spot a scam email without clicking anything
Look at the actual email address, not the display name. Hover over a link, never click it, and read where it really goes. Never call the number printed in the message. If it claims to be your bank, use the number on the back of your card. The one rule that catches most of them: no real company needs your password by email.
· 5 min read
A good scam email is not badly written any more. It has the right logo, the right footer, and a sentence about your account that sounds like it was written by someone who knows you. The tells are not in the language. They are in the plumbing.
Look at the address, not the name
Your bank's display name is just text the sender types. Tap or hover the name and read the actual address. It will be something like service at bank-secure-verify dot com, which is not your bank. The display name lies. The address cannot hide.
Hover the link and read the real destination
On a computer, rest the pointer on the button without clicking and read the address in the bottom corner. On a phone, press and hold, then look at the preview. If the address is not exactly your bank's domain, stop. A link that says bank dot com in the text can point anywhere.
- The sender address is not the real domain.
- The link points at a domain that is not the company's.
- It creates urgency: within 24 hours, account suspended, final notice.
- It asks for a password, a PIN, a full card number, or a one time code.
- It asks you to pay by gift card, transfer, or crypto. No real company does.
Never use the contact details in the message
The number in a scam email goes to the scammer. Call the number on the back of your card, or open the company's app yourself and find the message there. If the message is real, it will also be in the app. That single check defeats most of them.
If you already clicked
Do not panic and do not delete the email yet. Change the password on that account from a different device, turn on two factor, and check the account's recent activity. If you entered card details, call the card issuer and ask them to block and reissue. The first hour matters more than the first day.
Report it, then delete it
Forward it to your country's reporting address, then delete it. Forwarding takes ten seconds and it is the only thing that gets the domain taken down for the next person.
Questions
Is it safe to open the email?
Opening is usually fine. Clicking a link or opening an attachment is the risk. Turn off automatic image loading if you want to be careful, because images can confirm your address is live.
The email had my name and part of my account number. Is it real?
No. Data breaches mean scammers often have your name and a partial number. That is exactly why they include it. Knowing something about you is not proof of who they are.
Can an AI check an email for me?
It can read the wording and point out pressure tactics, but it cannot see the real link destination for you. Remove your name, address and any account numbers before you paste anything.
Keep reading
· 5 min read
How to check if a text or email is a scam
A plain checklist for suspicious messages: the red flags, the links to avoid, and what to do if you already clicked.
· 5 min read
How to help a parent who is losing confidence with technology
Do not take the phone and do it for them. Change one thing per visit, write the steps on paper, and let them do the tapping while you watch.
· 5 min read
How to help a grandparent with a letter, a form, or a phone
A calm, respectful way to help: sit beside them, read the letter aloud, write the questions down, and let them make the call.