Phishing Email Examples
Learn to spot and avoid phishing scams
Phishing emails are designed to trick you into revealing personal information, clicking malicious links, or downloading malware. This guide shows you real examples of phishing emails and teaches you exactly what red flags to look for.
What is Phishing?
Phishing is a type of cyber attack where criminals impersonate legitimate organizations to steal your personal information, login credentials, or money. These attacks most commonly come through email, but can also occur via text message (smishing), phone calls (vishing), or social media.
🎯 The Goal
Steal login credentials, financial information, install malware, or trick you into sending money.
🎭 The Method
Impersonate trusted entities like banks, social media, employers, or government agencies.
📊 The Scale
Over 3.4 billion phishing emails are sent daily. 1 in 5 employees will click a phishing link.
Real Phishing Email Examples
Below are examples of common phishing email types. Each example highlights the specific red flags that identify it as a scam.
Bank Account Verification Scam
Red Flags to Notice:
- Domain is fake (bankofamerica-secure.com is not official)
- Creates urgency to bypass critical thinking
- Generic greeting "Dear Valued Customer"
- Threatens account suspension
Fake Invoice / Payment Scam
Red Flags to Notice:
- Domain mimics but doesn't match official Microsoft
- Creates anxiety about losing service
- Link likely leads to fake payment page
- Pressure to act quickly
Prize / Lottery Scam
Red Flags to Notice:
- Too good to be true - you didn't enter any contest
- Suspicious domain
- Requires personal information to claim
- Classic advance-fee fraud setup
CEO / Business Email Compromise
Red Flags to Notice:
- Spoofed executive email address
- High urgency, bypassing normal procedures
- Requests unusual financial action
- Asks to keep it confidential
Phishing Red Flags Checklist
Before trusting any email, check for these warning signs. Multiple red flags = high risk of phishing.
How to Verify Suspicious Emails
Check the Sender Address
Look carefully at the email domain. [email protected] is legitimate, but [email protected] is not. Attackers often register similar-looking domains.
Hover Over Links (Don't Click!)
Hover your mouse over any link to see the actual destination URL. If the displayed text says "amazon.com" but the actual link goes somewhere else, it's phishing.
Contact the Company Directly
If an email claims there's an issue with your account, go to the company's official website by typing the address yourself (not through the email link) or call their official phone number.
Check for HTTPS (But Don't Trust It Blindly)
Legitimate sites use HTTPS, but so do phishing sites. A lock icon means the connection is encrypted, not that the site is trustworthy. Always verify the exact domain name.
Trust Your Instincts
If something feels wrong, it probably is. Urgency, pressure, and requests for sensitive information should all raise suspicion. When in doubt, don't click.
What To Do If You Clicked a Phishing Link
If you clicked on a phishing link or provided information, act quickly to minimize damage:
Immediate Actions
- Don't enter any information - close the page immediately
- Change your password for that account immediately
- Enable 2FA if you haven't already
- Run a virus scan on your device
Follow-Up Steps
- Monitor your accounts for suspicious activity
- Contact your bank if financial info was shared
- Report the phishing to the impersonated company
- Forward to [email protected]
Frequently Asked Questions
What is a phishing email?
How can I tell if an email is phishing?
What should I do if I clicked on a phishing link?
Can phishing emails look exactly like real emails?
What is spear phishing?
How do I report phishing emails?
Practice Identifying Phishing Emails
Test your phishing detection skills with our interactive simulator. Learn to spot the red flags in a safe environment.