Scam guide

How To Spot a Phishing Email Before You Click

A phishing email can copy a familiar logo and display name while coming from an unrelated address. The safest check happens outside the message: use a website, app, or phone number you already know is real.

Reviewed August 25, 2026

The short answer

Do not rely on the sender's display name. Reveal the full email address, avoid unexpected links and attachments, and contact the organization through its official website or app.

Common warning signs

The display name looks familiar, but the full address uses an unrelated or misspelled domain.
The message creates urgency about a payment, delivery, password, account hold, or refund.
An unexpected invoice, document, or attachment is included.
The email asks you to confirm personal, financial, or sign-in information through a link.
The link destination does not match the organization the message claims to represent.

What to do instead

Open the sender details and read the complete email address—not only the display name.
Do not open an unexpected attachment or use a link in a message that asks you to act urgently.
Open the company's official app or type a known website address yourself.
Contact the sender another way if the request might be real.
Report the message as phishing, then delete it.

If you clicked or entered information

What to do depends on what was opened or shared. Use a device you trust for account recovery when possible.

Change the password for the affected account and any other account that reused it.
Turn on multi-factor authentication and review recent account activity.
If an attachment or download opened, update the device's security software and run a scan.
Contact the real company or financial institution if account or payment information was entered.
Use IdentityTheft.gov if personal information may have been stolen, and report the phishing attempt to the FTC.

Open Help Now

Practice this safely

Practice revealing the address behind a familiar display name before deciding what to do with an unexpected email.

Every story is fictional. There is no timer, no score, and no real message, payment, or account.

Start the four-story practice

Official sources

These links open official U.S. government guidance in a new tab. The destination is shown before you open it.

This page provides general educational information. It cannot determine whether a specific message is genuine, investigate an incident, or promise recovery or reimbursement.