Phishing is the most common way criminals steal passwords and money. A phishing email pretends to come from a trusted company and tries to trick you into clicking a link, opening an attachment or sharing personal details. Use this quick checklist every time an email feels slightly "off".
1. Check the real sender address
The display name can say anything, like "Your Bank" or "Delivery Service". Click or tap the name to see the actual address. A message from a bank should not come from a random free email account or a misspelled domain.
2. Look for urgency and threats
"Your account will be closed in 24 hours" or "Payment failed – act now" are classic pressure tactics. Legitimate companies rarely threaten you by email.
3. Hover before you click
On a computer, move your mouse over a link without clicking. The real destination appears at the bottom of the browser. If it does not match the company's official website, do not click.
4. Be suspicious of attachments
Unexpected invoices, shipping labels or "documents" can contain malware. Do not open attachments you were not expecting, especially files that ask you to "enable content" or "enable macros".
5. Watch for generic greetings and mistakes
"Dear customer", odd grammar and blurry logos are common signs of a fake message, although modern phishing can look very professional.
6. Never enter passwords from an email link
If you are worried about your account, open a new browser tab and type the company's website address yourself, or use the official app.
How temporary email helps
When you use a disposable address for random sign-ups, fewer companies and lists know your real email. That means fewer targeted phishing attempts reach your personal inbox in the first place.
What to do if you clicked
- Change the password of the affected account immediately.
- Enable two-factor authentication.
- Contact your bank if you entered card or banking details.
- Run a security scan on your device.