Email scams
Email scams range from phishing for logins to fake invoices, account-suspension alerts, and sextortion threats. Many push you to click a link, call a number, or pay quickly before you can verify.
Last reviewed 2026-06-15.
How these scams usually work
An email scam typically imitates a brand, employer, or service you recognise, using a spoofed sender name and familiar logos. The message manufactures a reason to act: an invoice to settle, an account to re-verify, a delivery to confirm, or a threat to expose something. A link leads to a fake login or payment page, or you are urged to call a number staffed by the scammer. Some emails carry an attachment built to install software. The push to respond quickly is deliberate, because a few minutes of checking would expose the fake.
What the scammers want
- Logins
- Payments
- Remote access
- Fear-driven payments
Common red flags
What to do
- Don't click links or call numbers in unexpected emails.
- Log in via the official app/site.
- Check invoices and requests directly in the provider.
What not to do
- Do not enter credentials on linked pages.
- Do not pay sextortion demands.
- Do not install 'support' apps.
Common scam messages in this category
Top scam types
Related trend reports
- Scam Trends in 2023: Delivery Smishing, Bank Alerts and Early AI Phishing
- Scam Trends in 2026: AI-Driven, Emotion-Engineered and Multi-Channel Fraud
If you were affected
See our recovery guides and report through official channels via the reporting directory. Be wary of anyone offering to recover lost money for an upfront fee.
Official sources checked
- CFPB - Classic warning signs of fraud and scams - High reliability
- Google - November 2025 fraud and scams advisory - High reliability
Not sure about a message?
Paste it into the checker for a private, plain-English risk check. Your message stays in your browser.
Check a messageFrequently asked questions
How do I check if an email is real?
Don't trust links or numbers in the email. Log in to the service directly or contact it through official, known channels.
How can I spot a spoofed sender address?
Check the full email address, not just the display name, and look for slight misspellings or extra words in the domain. When unsure, ignore the email and log in to the service directly.
Is it dangerous to just open a scam email?
Opening an email is usually low risk. The danger is clicking links, opening attachments, or replying, so avoid those and delete the message.