How to recognize a phishing email

Sender, content, and attachment patterns that identify a fraudulent email.

By AlertaSpam Security Team. Published August 7, 2026

Check the actual email address behind the display name, not just the name itself — most mail apps show it if you tap or hover over the sender. A display name of 'Your Bank' sending from an unrelated domain is a strong signal on its own.

Generic greetings ('Dear customer'), urgent or threatening language, unexpected attachments (especially .zip, .exe, or documents that ask you to 'enable macros'), and a request to confirm a password or payment detail by replying or clicking a link are classic phishing traits.

A request for payment via gift cards, wire transfer to an unfamiliar account, or cryptocurrency is a major red flag on its own — legitimate organizations essentially never ask for these.

Hover over any link to preview its real destination before clicking, check the linked domain on AlertaSpam if unsure, and when in doubt, contact the organization using a phone number or website you already trust, not information from the email itself.