ShieldsON scam guide
Phishing email examples, with the red flags marked
Phishing emails pretend to be a company you trust so you will click a link, call a number, or type a password. These common examples show exactly what gives them away.
By the numbers
Phishing and spoofing were the most-reported internet crime in the U.S. in 2024, according to the FBI. Most other scams, from fake tech support to romance fraud, start with a single convincing message.
Example 1: The fake Microsoft subscription email
From: Microsoft Billing <billing@m1crosoft-support.net>
Subject: Important update to your Microsoft 365 subscription
Your subscription will renew today for $399.99. If you did not authorize this, call our billing desk at 1-8XX-XXX-XXXX.
Subject: Important update to your Microsoft 365 subscription
Your subscription will renew today for $399.99. If you did not authorize this, call our billing desk at 1-8XX-XXX-XXXX.
- The name says Microsoft, but the address is a lookalike domain.
- A large surprise charge creates panic.
- It asks you to call a number instead of signing in to your real account. The person who answers will ask for remote access to your computer.
Example 2: "Your phone number has changed"
Subject: Important: Your phone number has changed. Mail#5067324564
If this was not you, click below to secure your account.
If this was not you, click below to secure your account.
- Random reference numbers make it look official.
- Some scam emails use letters from other alphabets that look identical to English ones, so a fake brand name looks real.
- The "secure your account" link goes to a password-stealing page.
Example 3: The package delivery problem
We could not deliver your package. Pay a $1.99 redelivery fee within 24 hours.
- A tiny fee is used to collect your full card number.
- A deadline pushes you to act before you think.
- Real carriers don't ask for redelivery fees by email.
Example 4: The bank or account lock alert
- "Unusual sign-in detected. Your account will be closed."
- Generic greeting such as "Dear Customer."
- Asks you to confirm your password, PIN, or Social Security number. Real banks never ask for these by email.
The 5-second check
- Look at the sender's actual email address, not just the name.
- Ask: am I being rushed or scared?
- Don't click. Open the company's app or type its website yourself.
- Never give a password, code, or remote access to someone who contacted you.
- When unsure, ask someone. That's what ShieldsON's Trusted Advisors and Ask Fred are for.
How ShieldsON helps
The free ribbon checks the sender's domain, its authentication records, and where every link really goes, then shows a green, yellow or red rating at the top of the email.
Let ShieldsON check emails for you
The free ShieldsON email ribbon puts a plain-English safety rating on top of every email in Gmail, Outlook and Yahoo. No credit card, no ads. Members can also ask Fred, our scam-trained AI advisor, any time.