How to Tell If an Email Is Fake
How to Tell If an Email Is Fake
Fake emails — phishing and scam emails impersonating legitimate senders — are designed to look real, but they usually have telltale signs. Learning to tell if an email is fake helps you avoid phishing, scams, and malware. This guide explains the warning signs to check and how to verify a suspicious email, in plain terms.
Why Fake Emails Are Dangerous
Fake emails are a primary attack vector:
Impersonating trusted senders: Fake emails impersonate companies, banks, services, or people you trust to deceive you.
Various goals: They aim to steal your credentials (via fake login links), install malware (via attachments or links), or scam you out of money or information.
Designed to look real: Fake emails can look convincing, so knowing the signs to check is important.
Warning Signs an Email Might Be Fake
Check these signs when assessing an email:
Suspicious sender address: Check the actual sender email address, not just the display name. Fake emails often use addresses that are slightly off, misspelled, or unrelated to the claimed sender (display names can be faked).
Urgency or threats: Fake emails often create urgency or threats (account problems, deadlines, consequences) to pressure you.
Requests for credentials or sensitive information: Legitimate organizations rarely ask you to log in, verify, or provide credentials or sensitive information via email links.
Suspicious links: Check where links lead (hover or inspect) before clicking. Links pointing to addresses that do not match the claimed sender are a red flag.
Unexpected attachments: Unexpected attachments, especially executables or documents prompting macros, can carry malware.
Generic greetings: Generic greetings ("Dear Customer") instead of your name, though not definitive.
Spelling and grammar errors: Errors can signal fakes, though sophisticated fakes may have none.
Mismatched or off details: Branding, formatting, or details that seem slightly off.
How to Verify a Suspicious Email
When unsure, verify rather than trust:
Check the sender address carefully: Look at the full email address, watching for slight misspellings or wrong domains.
Don't click links — navigate directly: Instead of clicking a link in the email, go directly to the organization's site or app yourself to check any claim.
Verify through a known channel: Contact the organization or person directly using known contact information (from their official site or your records), not contact details in the email.
Be skeptical of the request: Ask whether the request makes sense and whether a legitimate sender would ask this via email.
Don't act under pressure: Take time to verify, since fake emails rely on urgency.
How to Handle a Fake Email
If you determine (or suspect) an email is fake:
Don't click, reply, or open attachments: Do not interact with suspicious links, replies, or attachments.
Report it: Use your email's "Report Phishing" or "Report Spam" option, which helps protect you and others.
Delete it: Delete the fake email.
If you already interacted: If you clicked a link and entered credentials, change that password (and anywhere reused) and enable 2FA. If you opened an attachment, run security software.
Frequently Asked Questions
How can I tell if an email is fake?
Check the warning signs: look at the actual sender email address (not just the display name, which can be faked) for slight misspellings or wrong domains; watch for urgency or threats designed to pressure you; be suspicious of requests to log in or provide credentials or sensitive information via links; check where links lead (hover or inspect) for addresses that do not match the claimed sender; be wary of unexpected attachments; and notice generic greetings, spelling errors, or details that seem off. When unsure, verify by navigating directly to the organization's site or contacting them through a known channel rather than clicking links in the email.
How do I check if an email's sender is real?
Check the actual, full sender email address, not just the display name — display names can be set to anything, so a fake email may show a trusted name but come from an unrelated or misspelled address. Look for slight misspellings, extra characters, or wrong domains in the address. However, sender addresses can also be spoofed to look legitimate, so do not rely on the address alone: if an email makes a request or seems suspicious, verify independently by navigating directly to the organization's site or contacting them through known contact information, rather than trusting the email or replying to it.
What should I do if I get a fake email?
Do not click any links, reply, or open attachments. Report it using your email's "Report Phishing" or "Report Spam" option, which helps protect you and others, then delete it. If you already interacted — for example, clicked a link and entered your credentials — change that password immediately (and anywhere you reused it) and enable 2FA. If you opened an attachment, run security software and watch for signs of compromise. The key is not to interact with suspicious emails, and to act quickly to secure your accounts if you already did.
Conclusion
Fake emails — phishing and scam emails impersonating legitimate senders — are designed to look real but usually have telltale signs, so learning to tell if an email is fake helps you avoid phishing, scams, and malware. Fake emails impersonate trusted senders to steal credentials, install malware, or scam you. Check the warning signs: a suspicious sender address (looking at the full address, not just the display name, which can be faked), urgency or threats, requests for credentials or sensitive information, suspicious links (checking where they lead), unexpected attachments, generic greetings, spelling errors, and off details. When unsure, verify rather than trust: check the sender address carefully, do not click links but navigate directly to the organization's site, verify through a known channel, be skeptical of the request, and do not act under pressure. If an email is fake, do not click, reply, or open attachments — report it, delete it, and if you already interacted, change affected passwords and run security software. By checking these signs and verifying suspicious emails independently, you can reliably tell if an email is fake and protect yourself.