Don’t take the bait: 6 signs it’s a scam
Scam emails used to be easy to spot. The spelling was bad and the story made no sense. That isn't true anymore.
Today they use real logos. They sound like your bank, your boss, or a vendor you pay every month. Some are even written with AI, so the grammar is perfect. They're built to look like the emails you get every day.
I see this more and more with the small businesses I work with. And it only takes one click from one person on your team to cause a real problem.
You don't need to be technical to protect yourself. A few simple habits will stop most of these emails. It starts with knowing what to look for.
6 Signs an Email Isn't What It Seems
1. It pushes you to hurry. A tight deadline is one of the oldest tricks around. "Your account will be closed today." "Payment overdue, respond within the hour." Scammers want you to panic so you don't stop and think. A real company will give you time.
2. The sender looks a little off. The name says PayPal, but the address says paypa1-support@gmail.com. Always look at the actual email address, not just the display name. One swapped letter or a free email account is a big red flag.
3. It asks for money. Watch for unusual payment requests. Be extra careful when a vendor you already know suddenly wants you to pay a different way or send money somewhere new. That's one of the most common scams out there.
4. The link doesn't match. On a computer, hover over a link before you click it. The address that pops up should match the company. If it's a jumble of letters or a site you've never heard of, don't click.
5. There's an attachment you weren't expecting. An invoice you didn't ask for. A shared file from someone you haven't talked to in months. If you weren't expecting it, check with the sender another way before opening it.
6. It doesn't know your name. "Dear Customer" or "Hello User" from a company you do business with? The companies you work with usually know who you are.
Simple Habits That Protect You
You don't have to remember all six signs every time you open your inbox. A few habits do most of the work for you.
Turn on two-step login. Even if someone gets your password, they still can't get in without the code sent to your phone. If you do just one thing from this list, do this.
Use a different password for each account. When one site gets hacked, the rest stay safe. A password manager remembers them so you don't have to.
Confirm money requests with a phone call. Use a number you already have, not the one in the email. It takes a minute and it's worth it.
Go to the website yourself. Got an email from your bank? Skip the link. Type the address into your browser or use the app.
Keep your updates on. Those update reminders on your phone and computer often fix security holes. Don't keep putting them off.
Report it, then delete it. Use the "Report phishing" or "Report spam" option in Gmail or Outlook. It helps protect everyone else, too.
Already Clicked? Don't Panic.
It happens to smart, careful people every day. If it happens to you, here's what to do.
Change the password for that account right away. If you use the same password anywhere else, change those too.
Turn on two-step login if it isn't on already.
If you shared card or bank details, call your bank now. They can watch for charges or put a hold on the card.
Give your contacts a heads-up so they don't fall for emails that look like they're from you.
Report it at reportfraud.ftc.gov.
And please don't feel embarrassed. The people who write these emails do it full time. The sooner you speak up, the less damage they can do.
One More Thing: Your Own Email Address
If your business uses an address like yourbiz123@gmail.com, anyone can create one that looks almost the same in about two minutes. Your customers have no easy way to tell which one is really you.
An address on your own domain, like you@yourbusiness.com, is much harder to copy. It also looks more professional, and customers are more likely to trust it.
This is something I help my clients set up. If you've been meaning to get a professional email address and just haven't gotten around to it, send me a message. I'm happy to walk you through it.
Your Turn
Have you ever gotten an email that almost fooled you? What gave it away? Tell me in the comments. It might help someone else spot the next one.
Comments