Is This Email a Scam? Here's How to Tell in 30 Seconds

Every single day, over 3 billion phishing emails are sent worldwide. If you have an email account, scammers are trying to trick you — and their messages look more convincing than ever.

The good news? You do not need to be a computer expert to spot them. There are five simple things you can check in under 30 seconds, and once you know what to look for, you will never fall for a fake email again.

The 5 Red Flags That Give Away Every Scam Email

1. Check the Sender's Actual Email Address

This is the single most important thing you can do. Scammers will make the display name look real — it might say "Amazon Customer Service" or "Bank of America Alerts." But the actual email address tells the truth.

Here is what to look for:

• Real: noreply@amazon.com
• Fake: noreply@amaz0n-support.com or amazon-alerts@random-server.net

On your phone, tap the sender's name to reveal the full email address. On a computer, hover over it with your mouse. If the part after the @ symbol does not match the real company's website, delete the email immediately.

A real company will always email you from their own domain. If Bank of America is contacting you, the email will end in @bankofamerica.com — not @bankofamerica-secure-alerts.com.

2. Look for Urgency and Fear Tactics

Scammers want you to panic. When you are panicking, you do not think clearly — and that is exactly when you click links you should not click.

Watch out for language like:

• "Your account will be CLOSED in 24 hours"
• "Unauthorized transaction detected — ACT NOW"
• "You have been selected — respond IMMEDIATELY or lose your reward"
• "Your Social Security number has been compromised"

Real companies do not threaten you over email. Your bank will not close your account because you did not click a link within 24 hours. If something sounds urgent and scary, that is the scammer talking.

What to do instead: If you are worried it might be real, close the email entirely. Open a new browser window, go directly to the company's real website (type it in yourself), and log in to check your account. If there is a real problem, you will see it there.

3. Hover Over Links Before You Click

This one takes three seconds and can save you thousands of dollars. Before you click any link in an email, hover your mouse over it (on a phone, press and hold without tapping).

A small preview will show you where the link actually goes.

• Real: https://www.amazon.com/your-orders
• Fake: https://www.amaz0n-verify.com/login or https://192.168.4.22/amazon-login

If the link does not go to the real company's website, do not click it. Period.

Important: Scammers also use link shorteners (like bit.ly or tinyurl) to hide bad links. A real company sending you an official email will never use a shortened link.

4. Watch for Spelling and Grammar Mistakes

Major companies like Apple, Amazon, and your bank hire professional writers. Their emails are polished and proofread. Scam emails, on the other hand, often contain:

• Odd phrasing: "Dear valued customer, we have detect unusual activity"
• Misspellings: "Amzon" instead of "Amazon"
• Strange formatting: random CAPITALIZATION, extra spaces, or mismatched fonts
• Generic greetings: "Dear Customer" instead of your actual name

If an email from your "bank" has typos in it, your bank did not send it.

One warning: Scammers are getting better at this, especially with AI tools helping them write. So even a well-written email can still be a scam — always check the sender address and links too.

5. They Ask for Personal Information

This is an absolute rule: no legitimate company will ever ask you to send your password, Social Security number, or credit card number via email. Not ever. Not for any reason.

If an email asks you to:

• "Verify your identity" by entering your SSN
• "Confirm your payment method" by typing in your card number
• "Reset your password" by replying with your current one
• Send a photo of your driver's license

It is a scam. Delete it.

What to Do If You Already Clicked a Suspicious Link

Do not panic. Here is what to do right now:

1. Disconnect from the internet — turn off Wi-Fi on your device. This stops any malware from sending your data.
2. Change your passwords — from a different device (like your phone if you clicked on your computer), change the password for any account the scam pretended to be from. Then change your email password too.
3. Run an antivirus scan — use a trusted program to scan your device for malware.
4. Monitor your bank accounts — check for any charges you did not make over the next few weeks.
5. Report it — forward the scam email to reportphishing@apwg.org and to the company being impersonated.

Key Takeaways

Here is your 30-second email safety check:

1. Check the sender's real email address — does the domain match the real company?
2. Look for urgency and threats — real companies do not panic you into clicking.
3. Hover over links — does the URL go where it says it goes?
4. Spot grammar mistakes — real companies proofread their emails.
5. Never share personal info via email — no exceptions.

If even one of these five things looks wrong, delete the email. It is always better to be safe. You can always call the company directly or visit their website yourself to check if something is really going on with your account.

Print this list out and keep it next to your computer. Share it with your family. The more people who know these five checks, the fewer people scammers can hurt.

Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.