Fake emails are becoming harder to spot. Learn the most common warning signs of phishing scams and how to protect yourself and your business.
Email scams are becoming more convincing every year. Criminals often impersonate banks, delivery companies, HMRC, Microsoft, and even businesses you work with regularly.
The goal is usually the same: trick you into clicking a link, downloading a file, or handing over sensitive information.
Whether you're a business owner or simply checking your personal inbox, here are the biggest warning signs that an email may be fake.
Always check the full email address, not just the display name.
Scammers often use addresses that look legitimate at first glance.
Common examples include:
Legitimate companies rarely demand immediate action within minutes or hours.
While scammers are getting better, many fake emails still contain unusual wording, spelling mistakes or strange formatting.
Before clicking any link, hover over it and check where it actually goes.
If the link destination doesn't match the company website, don't click it.
Be extremely cautious with attachments you weren't expecting, especially:
Reputable companies will never ask you to send passwords, banking details or card information by email.
Many scams are successful because they look almost genuine. If something feels unusual, contact the company directly using their official website or phone number.
Generic greetings such as:
can sometimes indicate mass phishing campaigns.
If an email claims to be from your bank, supplier or customer, contact them directly before taking any action.
If something doesn't look right, don't click. It is always better to verify first than deal with a compromised account later.
Businesses should ensure staff understand common phishing tactics and have secure email systems, backups, and website security measures in place.
If you're unsure whether an email is genuine, it's always worth checking before clicking any links or downloading attachments.
Not sure whether an email is genuine? Feel free to send me a screenshot and I'll help you check it.
Send the issue, URL or rough idea. I’ll tell you what I think the sensible next step is.
