Spotting Phishing Emails

Introduction

Phishing emails are fraudulent messages designed to trick recipients into revealing sensitive information, such as passwords, credit card numbers, or personal details. These emails often mimic legitimate organizations and can be highly convincing. Spotting phishing emails is a crucial skill for protecting your personal and professional data. This guide provides a comprehensive, step-by-step approach to identifying phishing attempts and safeguarding yourself against cyber threats.

Spotting Phishing Emails

Time Estimate

• 20–30 minutes to read and practice the steps

Material List

• Computer or smartphone with email access (cost: €0 if already owned)
• Internet connection (cost: varies, typically €0–€2 for data usage)
• Optional: Antivirus software (cost: €0–€50/year)
• Optional: Password manager (cost: €0–€40/year)
• Total estimated cost: €0–€90

Step-by-Step Guide

1. Examine the Sender’s Email Address

• Check the sender’s email address carefully, not just the display name.
• Look for subtle misspellings or extra characters (e.g., support@paypa1.com instead of support@paypal.com).
• Hover over the sender’s name to reveal the actual email address in most email clients.
• Be wary of generic email domains (e.g., @gmail.com) used for official communication.

Examining the sender’s email address for authenticity

2. Analyze the Subject Line and Greeting

• Phishing emails often use urgent or alarming subject lines (e.g., “Your account will be suspended!”).
• Check for generic greetings like “Dear Customer” instead of your actual name.
• Be cautious of emails that pressure you to act immediately.
• Compare with previous legitimate emails from the same organization.

Analyzing subject lines and greetings for signs of phishing

3. Inspect the Email Content for Red Flags

• Look for poor grammar, awkward phrasing, or spelling mistakes.
• Check for inconsistencies in formatting, such as mismatched fonts or colors.
• Be wary of requests for sensitive information (passwords, PINs, etc.).
• Notice if the email contains suspicious attachments or links.

Inspecting email content for common phishing red flags

4. Hover Over Links Without Clicking

• Place your mouse pointer over any links in the email (without clicking).
• Observe the URL that appears in the status bar or tooltip.
• Check if the link matches the legitimate website’s domain.
• Be suspicious of shortened URLs or links with random strings of characters.

Hovering over email links to reveal suspicious URLs

5. Verify the Authenticity of Attachments

• Do not open attachments from unknown or unexpected sources.
• Check the file extension; be cautious with .exe, .scr, .zip, or .js files.
• Scan attachments with antivirus software before opening.
• If in doubt, contact the sender through a verified channel to confirm legitimacy.

Verifying the authenticity of email attachments before opening

6. Look for Spoofed Branding and Logos

• Compare logos and branding in the email with those on the official website.
• Watch for low-resolution images, incorrect colors, or outdated logos.
• Check if the email uses inconsistent branding elements.
• Legitimate organizations rarely send emails with poor-quality graphics.

Identifying spoofed branding and logos in phishing emails

7. Assess the Request’s Plausibility

• Ask yourself if the request makes sense (e.g., would your bank ask for your password via email?).
• Be skeptical of emails asking for urgent wire transfers or confidential information.
• Cross-check the request with official communication channels (e.g., call the company directly).
• If the request seems unusual, it’s likely a phishing attempt.

Assessing the plausibility of requests in suspicious emails

8. Check for Unusual Sender Behavior

• Review the timing and frequency of emails from the sender.
• Be cautious if you receive an email from someone you know, but the tone or content is unusual.
• Watch for emails sent at odd hours or from unexpected locations.
• If unsure, verify with the sender through a separate communication channel.

Checking for unusual sender behavior in email correspondence

9. Use Security Tools and Features

• Enable spam and phishing filters in your email client.
• Use antivirus software to scan incoming emails and attachments.
• Consider browser extensions that warn about suspicious websites.
• Regularly update your software to patch security vulnerabilities.

Using security tools and features to detect phishing emails

10. Report and Delete Suspected Phishing Emails

• Do not reply to or engage with suspected phishing emails.
• Use your email client’s “Report phishing” or “Mark as spam” feature.
• Delete the email from your inbox and trash folder.
• Inform your IT department or email provider if you’re at work or school.

Reporting and deleting suspected phishing emails safely

Tips

• Always double-check URLs and sender addresses before clicking links or downloading attachments.
• Keep your operating system, browser, and security software up to date to reduce vulnerability to phishing attacks.
• When in doubt, contact the organization or person directly using verified contact information, not the details provided in the suspicious email.