Phishing emails are becoming a more common occurrence in today’s society. Sometimes they can be sneaky. Phishing emails are a problem because they trick people into giving up sensitive information like passwords or credit card numbers. They can look really convincing, which makes it easy to fall for them without realizing it's a scam. Below is a step-by-step guide using a fake email to show how to spot a scam before you get scammed.
Steps
-
1Inspect the email address. The message claims to come from Netflix, but the sender’s email is from a Gmail domain. The domain of an email is the part that comes after the “@” symbol, and it shows where the email is coming from, like in user@gmail.com, "gmail.com" is the domain. A gigantic company like Netflix will not use Gmail for its email domain. Some email services, like Outlook, will warn the user if an email comes from outside the organization.
-
2Catch the spelling or grammar mistakes. Many phishing emails include phrases or typos that don’t make sense because they’re rushed or translated poorly. Sometimes, scammers even make these mistakes on purpose. They’re designed to look for vulnerable people who will overlook the errors.Advertisement
-
3Notice the generic greeting. Instead of using the recipient's name, it says “Dear Customer.” Real services similar to Netflix will include an actual name if you have an account. If it’s generic, that’s a big hint that they don’t know who they are sending this to.
-
4Watch for any scare tactics and sense of urgency. The email warns to act fast or lose the account. Phrases like “your account is suspended” and “respond within 24 hours” are meant to cause panic, and people will rush to “correct the issue.” The added pressure is a classic phishing trick. The wording could also sound like they’re performing a favor. Notice the “suspended for your protection.”
Advertisement
-
1Hover over the links. Don’t click right away. Hover the mouse over the link and see where it leads. In this case, it looks like a Netflix link, but points to google.com, which is not what the hyperlink’s text says.
-
2Avoid downloading attachments. This email includes an “invoice.zip” file that it says shows suspicious charges. Unsolicited attachments are dangerous. They often contain malware or a virus that can infect a computer and cause more problems. Never open an attachment from an untrusted sender.
-
3Review the layout and branding. The email is plain, missing the usual Netflix logo and polished formatting. Real company emails are usually professionally designed and follow a consistent style. Check to see if you have old emails from Netflix, or visit the website and compare. If it looks thrown together or that it could possibly be a mass email, remain cautious and be skeptical.
Advertisement
-
1Go directly to the source. Instead of clicking any links, go straight to Netflix.com. If there’s a problem with the account, you’ll see it upon login. Don’t trust what the email says; check on your own. Netflix, like other websites, has a help section dedicated to phishing emails.
-
2Refuse to share sensitive information. This message says to confirm billing details. This is a huge red flag. Legitimate companies won’t ask for credit card numbers, passwords, or other personal info over email. A legitimate company will already have that information on file.
Advertisement
-
Enable a source of two-factor authentication. If possible, turn on 2FA (two-factor authentication). 2FA is a security process that requires you to verify your identity using two different methods, like a password and a code sent to your phone. It adds an extra step that makes it much more difficult for someone to break into your accounts, even if they have your password.
-
2Report the phishing attempt. If an email seems suspicious, forward it to the company it’s pretending to be from. For Netflix, send it to phishing@netflix.com. You can also report general phishing to reportphishing@apwg.org.
-
3Delete the message. Once it's reported, get rid of the email completely. That includes the trash folder. Go to the trash folder, select the email, and “delete forever.” It’s easy to click something by mistake later, so it’s best to clear it out right away.
Advertisement
Expert Q&A
Ask a Question
200 characters left
Include your email address to get a message when this question is answered.
Submit
Advertisement
Tips
Submit a Tip
All tip submissions are carefully reviewed before being published
Name
Please provide your name and last initial
Thanks for submitting a tip for review!
References
About This Article
Thanks to all authors for creating a page that has been read 8 times.
Advertisement