Phishing emails have gotten more convincing, but they almost always share a few telltale signs once you know what to look for.

Red Flags to Check

A mismatched sender address that looks close but not quite right, urgent language pressuring immediate action, and links that do not match the text they display are the three most reliable warning signs. Hovering over a link, without clicking, reveals its actual destination.

What to Do Instead of Clicking

If an email claims to be from a company you use, go directly to that company’s website or app instead of clicking the email’s link. Legitimate organizations will never ask you to confirm a password or payment details through an email link.

When in doubt, deleting the email and checking your account directly is always safer than clicking to verify.