How-to guide
How to spot a phishing email
Phishing emails imitate trusted brands to steal your login or payment details. They're getting better — but the tells are still there if you look.
Check before you click
Slow down and inspect these before doing anything the email asks:
- Does the sender's address really match the brand, or is it a look-alike?
- Hover over a link (don't click) — does it actually go where it claims?
- "Verify your account" / "payment failed" urgency is a classic hook.
- Generic greetings ("Dear customer") and small spelling errors.
What to do
Go to the company's site directly instead of clicking. When unsure, paste the email or a screenshot into Scam Doctor. Never enter your password on a page you reached from an email link.
Frequently asked questions
How do I check if an email is a scam?
Check the real sender address and link destinations, and paste the email into Scam Doctor for a verdict. Log in only by typing the site address yourself.
Is it dangerous to just open a phishing email?
Opening it is usually safe; the danger is clicking links, opening attachments, or entering details. Don't do those.