Unexpected email scams use familiar names, urgent problems, or attractive offers to encourage payment or disclosure of information. The FTC warns that phishing messages seek passwords, account numbers, and Social Security numbers. Open the real service independently to check a claim. An email’s displayed sender name or logo does not prove that the message came from the organization named.
The first decision is whether any action needs to happen through the email at all. The FTC advises contacting a company through a website or number already known to be genuine when a message asks for information. Check the actual account before paying an invoice, updating a card, or responding to a warning about supposed suspicious activity.
How email scams imitate familiar senders
Phishing messages can describe a login problem, a billing hold, or a purchase that needs urgent attention. The FTC explains that these stories encourage a click before the recipient checks the sender. A message that looks professionally written can still be deceptive. Verify the underlying account separately instead of treating formatting, branding, or a familiar subject line as proof.
Email scams can also claim to be from a government agency with a refund or official request. The IRS warns about deceptive tax-related messages and provides its own reporting instructions. Use agency websites independently to assess the demand. The IRS scam guidance explains how tax impersonation can involve threats, false credits, and links that collect sensitive personal or financial details.
| Message | Check before acting |
|---|---|
| Account suspended | Open the real account independently. |
| Prize or award | Refuse payments demanded to collect it. |
| Unexpected attachment | Check the sender through another route. |
Award notices and invoice email scams
An award announcement can turn into a demand for processing costs, taxes, or personal information. The FTC says a payment required to collect a prize is a warning sign, even when a well-known organization is named. Check the supposed award through the organization’s genuine website. Do not pay the sender merely because the email includes a certificate or congratulatory language.
Email scams involving invoices can create fear that money has already been charged. The FTC warns that unfamiliar invoices may be fabricated. Check the payment account independently before calling a number printed in the message. The technical support scam guide explains how fake subscription notices can lead to refund stories, remote computer access, and demands for another transfer.
Checking links and attachments before opening
Attachments deserve caution because the FTC warns that opening them can install harmful software. Do not open an unexpected file simply to determine whether the sender’s story is true. Contact the organization independently or inspect the actual account through its genuine app. The same principle applies to links asking the reader to sign in, confirm information, or enter payment details.
The FTC recommends layered protection against phishing, including automatic software updates, multifactor authentication, and backups. These measures reduce exposure but do not make a specific message genuine. Continue checking the request itself, especially if it involves money or credentials. A security tool’s silence is not a reason to bypass independent confirmation through the real company or agency involved.
Reporting phishing and preserving useful evidence
Forward phishing emails to [email protected] and report the attempt at ReportFraud.ftc.gov. If a message impersonates the IRS, use its tax-specific instructions as well. Preserve relevant records before deleting the message. The reporting guide helps distinguish evidence about the sender from the separate account and transaction details needed by a bank or platform.
Report email scams even when no money was sent, and take recovery steps if information was disclosed. The FTC directs people with exposed sensitive information to IdentityTheft.gov for situation-specific guidance. If a link or attachment may have installed malware, update security software and run a scan. Contact the payment provider immediately if the interaction resulted in a transfer or payment.
Responding after a deceptive email
When a deceptive email prompted a payment, contact the bank or payment service immediately using its genuine app or established telephone number. The FTC recommends asking about reversal. Supply the email’s requested recipient and the transaction reference, explaining whether the account holder authorized payment after reading the message or somebody used stolen account access to initiate the transfer.
Credentials typed into a page linked from a deceptive email should be replaced through the genuine service. Change matching passwords on other accounts and enable multifactor authentication, following FTC guidance. Keep the email and destination link as evidence of exposure. For identity misuse, IdentityTheft.gov provides steps matched to the information disclosed, separate from disputing any resulting payment.
An inbox may receive another message offering to recover money lost through an earlier fraudulent email. The FTC warns that recovery scammers request fees or financial information while exploiting previous losses. Read the recovery warning signs, retain the new sender and payment instructions, and approach the original bank directly instead of trusting an emailed promise of guaranteed reimbursement.
Questions and answers
Does a real company logo authenticate an email?
The FTC warns that phishing messages can copy familiar company branding. Treat a logo shown in an email as copied branding rather than evidence of who sent the message or controls the linked website. Open the genuine service independently before entering information or following payment instructions in an unexpected email message.
Should an unfamiliar invoice be paid to avoid trouble?
The FTC identifies unfamiliar invoices as a phishing tactic. Check the actual payment or shopping account independently and contact the genuine company through a known route. Do not let a message’s deadline or phone number determine how the charge is investigated.
Where should phishing emails be forwarded?
The FTC recommends forwarding phishing emails to [email protected] and reporting attempts at ReportFraud.ftc.gov. Government agencies and individual companies may also publish their own impersonation-reporting instructions. Use those genuine pages rather than a reporting address supplied by the suspicious sender.
What if an attachment may have installed malware?
The FTC recommends updating the computer’s security software, running a scan, and removing identified problems. If personal information was exposed, use IdentityTheft.gov for relevant steps. Also secure affected accounts and contact the payment provider about any money already transferred.
What if a phishing invoice led to a bank transfer?
Contact the sending institution immediately, describe the email's invoice story, and ask whether the transfer can be reversed. The FTC recommends prompt payment-provider contact after deception. Preserve the original message and recipient details instead of using the invoice's telephone number to request a refund.
How should an email account be secured after a fake login page?
Change the exposed email password through the genuine provider and replace it on any other account where reused. FTC guidance recommends multifactor authentication. If access has been lost, use the provider's recovery process directly; another message offering to restore access may continue the original phishing attempt.
What if a phishing attachment exposed identity information?
The FTC directs identity-theft victims to IdentityTheft.gov for a recovery plan suited to the information involved. Keep the original email and identify the documents or numbers disclosed. Separately address any harmful download with updated security software and contact affected financial providers about exposed payment details.
Should an emailed refund offer require an advance payment?
An unsolicited email promising to recover an earlier loss for a processing fee matches the FTC's refund-scam warning. A familiar agency logo does not authenticate the sender. Check the original payment through its real provider, and preserve the email without paying or supplying financial credentials.
Sources
- How To Recognize and Avoid Phishing Scams · Federal Trade Commission
- Report fake IRS, Treasury or tax-related emails and messages · Internal Revenue Service
- Fake Prize, Sweepstakes, and Lottery Scams · Federal Trade Commission
- How To Spot, Avoid, and Report Tech Support Scams · Federal Trade Commission
- What To Do if You Were Scammed · Federal Trade Commission
- Refund and Recovery Scams · Federal Trade Commission