How to spot a phishing email: 9 signs anyone can check
The nine warning signs of a phishing email, explained in plain words, and a free way to check a suspicious email in seconds.
A phishing email tries to trick you into clicking a link, opening an attachment, paying or giving a password. Most of them share the same warning signs. You don't need to be technical to spot them: you need to know where to look.
1. The sender's address doesn't match the name
The name says "PayPal" or "Your bank", but the address is something like service@paypa1-secure.com or a Gmail account. Real companies write from their own domain. On a phone, tap the name to see the real address.
2. It creates urgency or fear
"Your account will be closed in 24 hours", "last reminder", "unpaid fine". Pressure is the scammer's main tool: it stops you from thinking and checking.
3. It asks for a password, a code or card details
No bank, tax office or delivery company asks for these by email. If a message asks you to "confirm your details", assume it's a scam.
4. The link doesn't go where it says
The text shows the real company's website, but the link opens another address. On a computer, hover over the link without clicking to see where it really goes.
5. The web address is almost right
Look-alike domains swap one letter (amaz0n, micros0ft), add words (paypal-secure-login.com) or use letters from another alphabet. If in doubt, type the company's address yourself instead of clicking.
6. An unexpected attachment
An invoice you weren't expecting, a "document" as a web page, a zip file protected by a password given in the same email: these are classic ways to install malware.
7. It doesn't know your name
"Dear customer", "Dear colleague": the same message went to thousands of people.
8. A new way to pay
A supplier announcing "new bank details", or your boss asking for gift cards: call them on a number you already know before paying anything.
9. It's too good to be true
An inheritance, a lottery you never entered, a refund you weren't expecting. If it's too good to be true, it's a scam.
Not sure? Let Fishi check it
Forward the suspicious email to check@fishi.email (ideally with "Forward as attachment"). Within seconds, Fishi checks the sender, every link and every attachment and replies with a clear answer: safe, junk, suspicious or a scam, and what to do next. It's free and needs no account.