How to Spot a Phishing Email in 10 Seconds (With Real-World Warning Signs)

Some links in this guide are affiliate links: if you buy, TechForLive may earn a commission at no extra cost to you. Details.

Why phishing is harder to spot now

Old scams were full of spelling mistakes. Today AI tools write fluent, personalised messages, and scammers copy real logos and layouts perfectly. That is why the checks below focus on behaviour (what the message wants you to do), not grammar.

The warning signs

1. Mismatched sender. "PayPal Support" sending from paypal-secure-alerts@gmail.com or a look-alike domain such as paypa1.com.
2. Urgency or fear. "Your account will be closed in 24 hours", "Unusual sign-in detected", "Final notice".
3. Links that do not match. On a computer, hover over the link; on a phone, press and hold to preview it. The real destination is what matters.
4. Unexpected attachments, especially .zip, .html, .iso or documents that ask you to "enable content".
5. Requests for codes. No real company asks you to read out a one-time code it just sent you.
6. Unusual payment methods: gift cards, crypto, wire transfers to new accounts.
7. QR codes in emails or letters ("quishing") that lead to fake login pages, bypassing email link scanners.
8. Too-good-to-be-true offers: refunds, prizes, packages you did not order.

Text messages and calls

The same tricks arrive by SMS ("smishing") and phone ("vishing"): fake parcel delivery fees, toll charges, bank fraud alerts. Banks will never ask you to move money to a "safe account". Hang up and call the number on the back of your card.

If you already clicked

1. Did not enter anything? Close the page. Run a security scan to be safe.
2. Entered a password? Change it immediately on the real site, and anywhere else you reused it. Turn on two-factor authentication.
3. Entered card or bank details? Call your bank using the official number and ask them to block the card.
4. Opened an attachment? Disconnect from the internet, run a full antivirus scan, and change passwords from a different, clean device.
5. Report it: use your email app's "Report phishing" button so filters learn.

Make phishing much less dangerous

• Switch important accounts to passkeys, which cannot be typed into a fake site. See what a passkey is.
• Use a password manager: it will not autofill on a fake domain, which is a great warning sign.
• Read our list of searches that lead to scams.

Quick answers

Can I get hacked just by opening an email?

Very rarely with an updated email app. The danger comes from clicking links, opening attachments or replying with information.

The email used my real name and address. Is it real?

Not necessarily. Personal details leak in data breaches and are used to make scams convincing.