Help NowStart Practice

Scam guide

Is This Email Real? Check the Sender Address, Not the Name

A phishing email can copy a familiar logo and display name while coming from an unrelated address. The safest check happens outside the message: use a website, app, or phone number you already know is real.

Reviewed September 22, 2026

The short answer

Do not rely on the sender's display name. Reveal the full email address, avoid unexpected links and attachments, and contact the organization through its official website or app.

Common warning signs

  • The display name looks familiar, but the full address uses an unrelated or misspelled domain.
  • The message creates urgency about a payment, delivery, password, account hold, or refund.
  • An unexpected invoice, document, or attachment is included.
  • The email asks you to confirm personal, financial, or sign-in information through a link.
  • The link destination does not match the organization the message claims to represent.

What to do instead

  1. Open the sender details and read the complete email address—not only the display name.
  2. Do not open an unexpected attachment or use a link in a message that asks you to act urgently.
  3. Open the company's official app or type a known website address yourself.
  4. Contact the sender another way if the request might be real.
  5. Report the message as phishing, then delete it.

If you clicked or entered information

What to do depends on what was opened or shared. Use a device you trust for account recovery when possible.

  1. Change the password for the affected account and any other account that reused it.
  2. Turn on multi-factor authentication and review recent account activity.
  3. If an attachment or download opened, update the device's security software and run a scan.
  4. Contact the real company or financial institution if account or payment information was entered.
  5. Use IdentityTheft.gov if personal information may have been stolen, and report the phishing attempt to the FTC.
Open Help Now

Common questions

How do I see the real email address behind a display name?
Select or tap the sender's name to open the full message details. Most email apps then show the complete address, which is the part that matters—the display name is simply typed in by whoever sent the message.
Is it dangerous just to open a phishing email?
Opening and reading a message is usually low risk. The risk comes from selecting a link, opening an attachment, or entering information, so you can read something suspicious and then close it.
What if the message might really be from my bank?
Treat the message as a prompt rather than as instructions. Open the bank's official app or type its address yourself, and anything that genuinely needs your attention will be waiting for you there.

Practice this safely

Practice revealing the address behind a familiar display name before deciding what to do with an unexpected email.

Every story is fictional. There is no timer, no score, and no real message, payment, or account.

Start the four-story practice

Official sources

These links open official U.S. government guidance in a new tab. The destination is shown before you open it.

Recent alerts on this

Related scam guides

This page provides general educational information. It cannot determine whether a specific message is genuine, investigate an incident, or promise recovery or reimbursement.