Practical ExampleModule 3 of 6
Reading a phishing email
The message
From: Maplestone Bank Security <alerts@maplestone-secure-verify.com>
Subject: URGENT: Your account will be suspended
Dear Customer,
We detected unusual activity on your account. To avoid suspension, verify your identity within 24 hours by signing in here: maplestone-login-check.com
Maplestone Bank Security Team
Maplestone Bank is a made-up name, but this is exactly how real phishing emails look.
The red flags
- A look-alike sender: the address uses an odd domain instead of the bank's real website.
- Urgency: a 24-hour deadline is designed to rush you.
- A generic greeting: "Dear Customer" instead of your name.
- A suspicious link: it goes to a different website from the bank's.
- A sign-in request: legitimate banks generally don't ask you to sign in through a link in an email.
What to do instead
Don't click the link or reply. Open the bank's app, or type its web address yourself, to check your account. Then report the email as phishing in your email app and delete it.
Texts too
The same tricks show up in text messages, often about package deliveries, tax refunds or prizes. Treat unexpected links in texts exactly as you would in email.