ShieldsONGet the free ribbon
ShieldsON scam guide

Phishing email examples, with the red flags marked

Phishing emails pretend to be a company you trust so you will click a link, call a number, or type a password. These common examples show exactly what gives them away.

By the numbers

Phishing and spoofing were the most-reported internet crime in the U.S. in 2024, according to the FBI. Most other scams, from fake tech support to romance fraud, start with a single convincing message.

Source: FBI Internet Crime Complaint Center, 2024 report.

Example 1: The fake Microsoft subscription email

⚠ High risk — sender does not belong to Microsoft
From: Microsoft Billing <billing@m1crosoft-support.net>
Subject: Important update to your Microsoft 365 subscription

Your subscription will renew today for $399.99. If you did not authorize this, call our billing desk at 1-8XX-XXX-XXXX.
  • The name says Microsoft, but the address is a lookalike domain.
  • A large surprise charge creates panic.
  • It asks you to call a number instead of signing in to your real account. The person who answers will ask for remote access to your computer.

Example 2: "Your phone number has changed"

⚠ High risk — hidden lookalike letters in the sender name
Subject: Important: Your phone number has changed. Mail#5067324564

If this was not you, click below to secure your account.
  • Random reference numbers make it look official.
  • Some scam emails use letters from other alphabets that look identical to English ones, so a fake brand name looks real.
  • The "secure your account" link goes to a password-stealing page.

Example 3: The package delivery problem

⚠ Suspicious — link goes to an unrelated website
We could not deliver your package. Pay a $1.99 redelivery fee within 24 hours.
  • A tiny fee is used to collect your full card number.
  • A deadline pushes you to act before you think.
  • Real carriers don't ask for redelivery fees by email.

Example 4: The bank or account lock alert

  • "Unusual sign-in detected. Your account will be closed."
  • Generic greeting such as "Dear Customer."
  • Asks you to confirm your password, PIN, or Social Security number. Real banks never ask for these by email.

The 5-second check

  1. Look at the sender's actual email address, not just the name.
  2. Ask: am I being rushed or scared?
  3. Don't click. Open the company's app or type its website yourself.
  4. Never give a password, code, or remote access to someone who contacted you.
  5. When unsure, ask someone. That's what ShieldsON's Trusted Advisors and Ask Fred are for.

How ShieldsON helps

The free ribbon checks the sender's domain, its authentication records, and where every link really goes, then shows a green, yellow or red rating at the top of the email.

Let ShieldsON check emails for you

The free ShieldsON email ribbon puts a plain-English safety rating on top of every email in Gmail, Outlook and Yahoo. No credit card, no ads. Members can also ask Fred, our scam-trained AI advisor, any time.

Add the free Chrome ribbon   See membership plans