Skip to content
ScamSniff
← Back to Home

Scam Prevention

Can You Spot the Fake? 5 Real vs. Fake Emails — Phishing Quiz

7 min read min readBy ClearShield Team

Most phishing emails don't look obviously fake anymore. They copy real logos, use real company names, and sound urgent — because urgency is how they get you to act before you think.

Here's the truth: even careful, smart people get fooled. That's not a character flaw. It's by design. But once you know what to look for, you'll catch things in seconds that used to slide right past you.

Take this quiz. For each pair below, decide which email is real and which is fake — then read the explanation. By the end, you'll have a mental checklist that works on any suspicious message you ever receive.


Quiz #1: Your Bank Needs to "Verify Your Account"

Email A:

Email B:

Which one is real? Email B.

Why Email A is the fake:

  • The sender domain is wrong. Real Chase emails come from @chase.com. This one uses chase-alerts.net — a completely different domain that anyone can buy for $12.
  • "Dear Valued Customer." Real banks use your name. Always. If they don't know your name, they're not your bank.
  • The threat of permanent closure. Scammers use panic to short-circuit your thinking. Real banks give you time and multiple contact options.
  • "Click here immediately." Real security emails tell you to go directly to the app or type the website yourself — they don't push you to click a link.

The giveaway in Email B: It names a specific date, location, and device type. Scammers can fake that too, but combined with the correct sender domain and your real name, it's a strong signal of legitimacy.


Quiz #2: Your Package Couldn't Be Delivered

Email A:

Email B:

Which one is real? Email A.

Why Email B is the fake:

  • The $1.99 fee is a classic trap. UPS, FedEx, and USPS do not charge redelivery fees via email. This "small" charge is designed to collect your credit card number — not $1.99.
  • The domain is fake. ups-tracking-portal.com sounds official. It isn't. Real UPS emails come from @ups.com.
  • The 24-hour deadline. Again — artificial urgency. Real delivery companies hold packages for days and send multiple notices.

Pro tip: If you're ever unsure about a package email, don't click anything. Open a new browser tab and go directly to ups.com, fedex.com, or usps.com and enter the tracking number there.


Quiz #3: Social Security Needs to Hear from You

Email A:

Email B:

Which one is real? Email B.

Why Email A is the fake — and one of the most dangerous on this list:

  • The Social Security Administration does not suspend benefits by email. Full stop. If there's ever a real issue, they send a letter to your home address.
  • The domain is completely fraudulent. Official U.S. government emails end in .gov. No exceptions. govbenefits-verify.org is not a government website.
  • That phone number goes to scammers. If you call it, someone will pretend to be a federal agent and pressure you to pay fines in gift cards or wire transfers.

This scam specifically targets older adults. The FBI's Internet Crime Complaint Center (IC3) consistently ranks Social Security impersonation among the top scams by dollar loss for people over 60. If you ever receive a call or email threatening benefit suspension, hang up and call the real SSA at 1-800-772-1213.


Quiz #4: Microsoft Says Your Computer Has a Virus

Email A:

Email B:

Which one is real? Email B.

Why Email A is the fake:

  • Microsoft does not detect viruses via email and then tell you to call a phone number. Windows Defender shows alerts on your screen, inside your computer — not in your inbox.
  • That support number connects to a scam call center. They'll ask to remotely access your computer, "find" fake problems, and charge you hundreds of dollars to "fix" them. This is called tech support fraud.
  • Even the sender address can be faked. Don't trust @microsoft.com alone — look at the full picture. The request to call a number is the real red flag.

What to do instead: If you see a virus warning on your actual computer screen — not in email — run Windows Defender from the Start menu yourself. If an email claims your account was hacked (like Email B), go directly to account.microsoft.com in a new browser tab.


Quiz #5: Your Netflix Subscription Is About to Be Canceled

Email A:

Email B:

Which one is real? Email A.

Why Email B is the fake:

  • The domain is wrong. Real Netflix emails come from @netflix.com. netflix-billing-update.com is a fake domain.
  • "Permanently deleted" and "final notice." Real streaming services keep your account in a paused state for weeks after a payment failure. They don't delete accounts in 24 hours.
  • Email A asks you to go to the app or netflix.com yourself. That's exactly what a real company does. Email B has a "click here" link — which leads to a fake login page designed to steal your Netflix password (and since many people reuse passwords, potentially much more).

Your 5-Second Email Checklist

Before you click anything in an unexpected email, run through this list:

  1. Look at the sender's full email address. Not just the name — the actual domain after the @ symbol. Does it match the company's real website?
  2. Does it use your real name? Scammers often use "Dear Customer" or "Dear User."
  3. Is there artificial urgency? "24 hours," "immediately," "or your account will be deleted" — these are pressure tactics.
  4. Does it ask you to click a link or call a number? Go directly to the company's website yourself instead.
  5. Does it ask for payment, a gift card, or personal information? Real companies rarely do this by email without prior contact.

One More Layer of Protection

Spotting phishing emails is a skill — but no skill is perfect. A strong, unique password for each account means that even if one gets stolen through a phishing attack, scammers can't use it anywhere else.

A password manager makes this easy. Dashlane stores all your passwords securely and alerts you if any of your accounts show up in a data breach. You only need to remember one master password. It's one of the simplest upgrades you can make to your online safety.

Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.

Last updated: 2026-06-10

```


phishingemail scamsonline safetyseniorsidentity theft