How to Recognize a Phishing Email
Learn how to spot fake emails that try to steal your passwords, money, or personal information.
Lesson content
Phishing is when a scammer sends a fake email that looks like it came from a real company — your bank, Amazon, the IRS, or even a friend. The email tries to get you to click a link, open an attachment, or reply with personal information.
Phishing emails often create urgency. They may say your account will be closed, a package could not be delivered, or you owe money. The goal is to make you act before you think.
Look closely at the sender’s email address. Scammers often use addresses that are almost right but slightly off — like “amaz0n-support.com” instead of “amazon.com.”
Be careful with links and attachments. If you did not expect the email, do not click. Instead, go directly to the company’s website by typing the address yourself or using a bookmark you already trust.
Real companies rarely ask for passwords, full Social Security numbers, or payment by gift card through email. When in doubt, call the company using the number on your statement or their official website.
Step-by-step actions
- Read the email slowly — do not rush because of urgency.
- Check who sent it. Does the email address look official?
- Do not click links. Open your browser and go to the site directly.
- If the email claims to be from your bank, call the number on your card.
- Delete the email or mark it as spam if it seems suspicious.
- Tell a family member if you are not sure — a second opinion helps.
Related lessons
Keep learning with these related topics.
What Is a Scam?
Learn what a scam is, why scammers target people, and the simple habits that help you stay safe every day.
How to Create a Strong Password
Simple steps to create passwords that are hard to guess and easy for you to manage safely.
What to Do If You Think You Were Scammed
Clear steps to take right away if you shared information, sent money, or clicked something suspicious.