Phishing Scams: How to Spot a Fake Email in Seconds
Published: December 05, 2025
Phishing remains the #1 cause of data breaches. It relies on "social engineering"—tricking you into clicking—rather than hacking your code. Here is how to spot a fake email instantly.
1. The "Urgency" Trap
Phishing emails almost always demand immediate action. "Your account will be suspended in 24 hours!" or "Unauthorized login attempt!" They want you to panic and click without thinking.
2. Check the Sender Address
A legitimate email from PayPal will come from `@paypal.com`. A scam email will come from `paypal-support@gmail.com` or `secure-paypal@notice-alert.com`. Always look at the actual email address, not just the display name.
3. Generic Greetings
Your bank knows your name. If an email starts with "Dear Customer" or "Dear Member," be suspicious. Legitimate institutions usually use your first name.
4. Hover, Don't Click
Hover your mouse cursor over any button or link in the email WITHOUT clicking. A small box will appear showing the actual destination URL. If the email says "Login to Netflix" but the link goes to `http://netflix-login-secure.xyz`, it is a scam.