How to Spot a Scam Email

Scam emails are designed to look official and create panic, so it's easy for anyone to be fooled — this has nothing to do with being bad with computers. Learning a few simple checks can help you catch almost all of them before they cause any harm.

1. Check the sender's actual email address, not just the name.

   A scam email might show a friendly name like "Bank of America," but the actual email address behind it (usually shown in smaller text, or visible if you tap the sender's name) is often a strange string of letters that has nothing to do with the real company.

2. Watch for urgent or scary language.

   Phrases like "your account will be closed," "act now," or "suspicious activity detected" are designed to make you panic and click without thinking. Real companies rarely demand instant action by email.

3. Look for spelling and grammar mistakes.

   Legitimate companies proofread their emails carefully. Odd phrasing, extra spaces, or obvious typos are a strong warning sign.

4. Never click a link or attachment you weren't expecting.

   If you weren't expecting a package tracking update, a bill, or a document, don't open it — even if it looks like it's from someone you know. Scammers can fake a familiar name.

5. Hover over links before clicking (or press and hold on a phone).

   On a computer, hold your mouse over a link without clicking, and the real web address will appear in the corner of the screen. On a phone, press and hold the link briefly to preview it. If the address looks strange or unrelated to the company, don't tap it.

6. When in doubt, contact the company yourself.

   Don't use any phone number or link from the email. Instead, look up the company's official number yourself — from a bill, the back of your card, or their real website — and ask them directly if the email was legitimate.

7. If you already clicked something, don't panic.

   Close the browser tab or app, and call us or a trusted family member. If you entered a password, change it right away on the real website (typed in yourself, not from the email).