Is this email a scam? 7 quick checks

The 7 checks

1. 1. Were you expecting it? An email you didn’t expect, about an order, a refund, a prize or a problem with your account, deserves a second look.
2. 2. Who really sent it? Look at the email address, not just the name. “Amazon Support” sent from amaz0n-billing-help.com is not Amazon.
3. 3. Is it rushing you? “Within 24 hours”, “final notice”, “your account will be closed”. Pressure is the scammer’s main tool.
4. 4. Does it ask for money in an odd way? Gift cards, wire transfers, cryptocurrency or a payment app to a stranger. Real companies don’t ask for these.
5. 5. Does it ask for a code, a password or your card number? Real companies never ask you to send these by email.
6. 6. Where does the link really go? On a computer, rest the mouse on the link without clicking. The real address shows at the bottom of the screen. If it isn’t the company’s real website, don’t click.
7. 7. Is there a phone number to call? Scam emails often say “call us now”. Don’t use that number. Use the one on your card, your bill or the company’s real website.

What it can look like

Red flags

• You didn’t expect it, or it’s about something you never ordered.
• The sender’s address doesn’t match the company’s real website.
• It gives you a deadline or a threat.
• It asks for a gift card, a wire, crypto, a code or a password.
• It wants you to call a number or open an attachment right now.

What to do

1. Don’t click, don’t reply and don’t call the number in the email.
2. If you’re worried, open the company’s app or type its real address yourself, and look at your account there.
3. Or call the number on the back of your card or on a paper bill.
4. Mark the email as spam or junk, then delete it.

If you already paid, clicked or shared a code

Don’t panic, and don’t blame yourself. Act quickly, one step at a time.

• Clicked a link but didn’t type anything? Close the page. You’re most likely fine.
• Typed a password? Change it now on the real website, and anywhere else you use the same one.
• Gave a card number or bank details? Call your bank using the number on your card. Ask them to block the card and watch for charges.
• Let someone onto your computer? Turn it off, then see our guide on tech-support scams.
• Report it at ReportFraud.ftc.gov. It helps others too.

How Gmork Scam Guard helps

Gmork Scam Guard reads the email you have open in Gmail or Outlook on the web, on your computer. If it looks like a scam, it gives expert advice: what looks suspicious and what to do next. It can miss scams, and it doesn’t work in phone email apps yet, so these checks still matter.

See what Gmork Scam Guard warns about and what it keeps private.

Questions people ask

Can I get a virus just by opening an email?

Opening an email is usually safe. The risk comes from clicking links, opening attachments, or typing your details on a page the email leads to.

The email has the real company logo. Is it real?

Not necessarily. Anyone can copy a logo. Check the sender’s address and where the links go instead.

Should I reply and tell them it’s a scam?

No. Replying tells the scammer your address is active. Just mark it as spam and delete it.