Every day, countless people fall victim to email scams, with some of the most common ones being phishing attacks. Phishing involves sending emails that appear to be from trustworthy sources in order to induce individuals to reveal personal information, such as passwords and credit card numbers.
A particularly devious form of phishing is when the scammer pretends to be you or your company. This is not only harmful to the individual targeted but can also damage your reputation. In this guide, we will explain how these scams work and how to spot and prevent them.
Understanding the Scam
Phishing scams are designed to trick you into giving away your personal information. The scammer pretends to be a trusted entity – a bank, a popular website, or even you. They’ll create an email that looks like it’s from you and send it to your contacts, often asking for sensitive information or directing them to a fake website where they’re asked to enter their information.
This might involve them hacking into your email account, or they may simply create a new email address that looks similar to yours. For example, if your email is [email protected], they might create an email address like [email protected] or [email protected]

How to Spot a Phishing Scam
- Check the email address: Always verify the sender’s email address. If it looks suspicious or different from the usual address, it’s likely a scam.
- Look for generic greetings: Many phishing emails start with generic greetings, such as “Dear Customer” or “Dear Member” (because they don’t know the name of the person they are emailing).
- Check for spelling and grammar mistakes: Professional organizations generally proofread their messages thoroughly. If an email is full of mistakes, be highly suspicious.
- Beware of urgent or threatening language: Many phishing scams use threats or a sense of urgency to trick you into providing your personal information.
- Verify the links: Hover over any links in the email (but don’t click them) to see where they actually lead. Be cautious of links that lead to unfamiliar websites. Again, don’t click them.

Preventing Phishing Scams
- Use a strong, unique password: This makes it harder for scammers to hack into your email account. Consider using a password manager to generate and store complex passwords.
- Enable two-factor authentication (2FA): This adds an extra layer of security by requiring a second form of verification, usually a code sent to your phone, in addition to your password.
- Educate your contacts: Let your contacts know that you will never ask for sensitive information via email. If they receive an email that appears to be from you requesting such information, they should know it’s a scam.
- Regularly monitor your accounts: Regularly check your accounts for any suspicious activity. If you notice anything unusual, take action immediately.
- Use reliable antivirus software: Keep your devices secure with antivirus software that offers real-time protection against phishing and other types of scams.

What to Do If You’ve Been Targeted
If you suspect you’ve been targeted by a phishing scam, don’t panic. Here are the steps you should take:
- Don’t respond or click on any links in the suspicious email.
- Contact the entity the email is pretending to be from (e.g., your bank) and let them know about the suspicious email.
- Change your passwords for all of your accounts.
- Report the phishing attempt to the Anti-Phishing Working Group.

In conclusion, by staying vigilant, you can significantly reduce the risk of falling victim to phishing scams. Always remember: when in doubt, simply do not click or engage!