How to Spot Phishing Emails
Phishing emails are potentially damaging if you don’t know how to spot them. Fraudsters craft up emails that look very convincing, pretending to be your bank, the HMRC, a virus protection software and many more. The emails will either encourage you to click through to a website that requests information from you, or to download harmful attachments. If you download an attachment in a phishing email, malware is installed onto your computer, giving the scammer access to passwords, card details, and any saved personal information on your computer.
Ensure you protect yourself from fraudulent emails with these top 4 tips!
1. Always Look at the Sender’s Email Address
It is important to check the email address for the domain name. Fraudsters trick users by displaying a fraudulent display name such as Google or HMRC, so you think the email is from a legitimate source. The reality is that you can have any display name you want and anyone can change their name to Google or HMRC. In order to spot fraudulent emails, check the domain name in the email address. No organisations will email you from a personal email account that ends in @gmail.com or @aol.com. Most organisations will have their own email domain, which matches the domain name when you search for the organisation on a search engine. For example, PayPal’s domain name is paypal.com, therefore emails from PayPal will always be from @paypal.com.
If you’re ever unsure about a suspicious email, visit the Action Fraud website for information about the email you have received.
It is also important to note that HMRC will never contact you via email about tax refunds. You will receive a letter to your home address about any tax refunds. If you do receive an email pretending to be the HMRC, forward it to phishing@hmrc.gsi.gov.uk and delete it.
2. Watch out for Grammar Mistakes
Many scammers won’t be from the same country as you, so although spelling might be correct, sentences won’t read very well and words may appear in the wrong context. Sentences such as “contact we to find out more” or “you receive a tax refund” are examples of some mistakes you can spot in a phishing email.
3. Never Download Attachments or Click on Links
Phishing emails often contain harmful attachments or links directing you to a website that will request information from you. A popular example is where the sender attaches a bogus invoice and is vague in the email, which encourages the victim to download the attachment to find out more. After the user has downloaded the attachment, it is too late and data on the computer may be compromised. In some cases, you may recieve a notice before downloading the file about it being harmful to your computer. Never download an attachment unless you are 100% sure of the legitimacy of the sender.
Another approach is to include a link such as “Verify your account”, which will request log in details to an account of some sort. It is important not to click any links or enter log in details unless you are certain that the email is from a safe and legitimate sender. You can see where the link goes by right-clicking on it. For example, a legitimate link will read “www.apple.com/” as opposed to “www.customersupportapple.net/”
4. Watch out If the Email Seems Alarming and Urgent
Many scams will encourage you to act immediately in order to avoid a made up consequence such as an account being permanently locked. Alternatively, scammers will try to fool you by mentioning money, which will be a believable amount. For example, if a fraudster states that you could be refunded £100,000 tax, then you know that this isn’t at all possible if you haven’t earned enough to be owed this, but a smaller amount such as £400 is more plausible and is still rewarding enough to entice you to click the link.
If you are ever unsure about a finance-related email you have received, give us a call on 01392 875391 and talk to a member of our helpful team.