How to Spot a Phishing Email: 10 Warning Signs
A phishing email is a fake message that pretends to come from a trusted organisation, such as your bank, HMRC, a delivery company or Netflix, to trick you into clicking a link, opening an attachment or sharing personal or payment details. You can usually spot one by checking for urgent pressure, a strange sender address, generic greetings, suspicious links and requests for information that a real company would never ask for by email.
To spot a phishing email, check the sender’s full email address, hover over links before clicking, and be wary of urgent threats, generic greetings like “Dear Customer” and requests for passwords or bank details. If in doubt, do not click. Contact the company using its official website or app, and in the UK forward the email to report@phishing.gov.uk.
Key Takeaways
- Real companies rarely ask for passwords, PINs or full card details by email.
- Check the sender address, not just the display name.
- Hover over links to see where they really go before you click.
- Urgency is a red flag: scammers want you to act before you think.
- Report it: forward phishing emails to report@phishing.gov.uk and scam texts to 7726.
What Is Phishing?
Phishing is a type of online scam where criminals send messages that look genuine to steal your money, passwords or personal information. The name comes from “fishing”: scammers send out lots of messages as bait and wait for someone to bite. Phishing can also happen by text message (smishing) and phone call (vishing).
10 Warning Signs of a Phishing Email
⏰ Urgent pressure
Threats such as “Your account will be closed in 24 hours” are designed to rush you.
📨 Odd sender address
The name may say “Royal Mail”, but the address is a random Gmail or a misspelt domain.
👤 Generic greeting
“Dear Customer” or “Dear User” instead of your real name.
🔗 Suspicious links
The web address does not match the company, or uses extra words and numbers.
💳 Requests for details
Asking you to confirm passwords, PINs, card numbers or security answers.
📎 Unexpected attachments
Files you were not expecting, especially .zip, .exe or Office files asking to “enable content”.
🎁 Too good to be true
Prizes, refunds or vouchers you did not enter for.
✍️ Poor spelling and design
Mistakes, strange wording or blurry logos.
💷 Payment problems
Claims that a payment failed or a parcel needs a small fee to be delivered.
🔐 Login alerts
Fake security warnings asking you to “verify” your account through a link.
How to Check a Suspicious Email Safely
- Do not click any links or open attachments yet.
- Look at the sender’s full email address. On a phone, tap the sender’s name to reveal it.
- Hover over links on a computer, or press and hold on a phone, to preview the real web address without opening it.
- Check for your name and details. Real companies usually use your name and may include part of your account number.
- Contact the company directly using its official app, website or the phone number on your card or bill, never the details in the email.
- Report and delete the email if it is fake.
Common Phishing Scams in the UK
| Scam | What the email says | What to do instead |
|---|---|---|
| Fake HMRC refund | You are owed a tax refund and must click to claim it | HMRC never tells you about refunds by email. Check your HMRC online account |
| Parcel delivery fee | A parcel is waiting and you must pay a small fee | Check tracking on the courier’s official website |
| Bank security alert | Unusual activity, log in to secure your account | Open your banking app or call the number on your card |
| Streaming account problem | Your payment failed and your account is suspended | Log in through the official app |
| TV Licence | Your licence has expired or you are owed a refund | Visit the official TV Licensing website directly |
Tip: If a message makes you feel worried, rushed or excited, stop and take five minutes before you act. Scammers rely on panic to make people click without thinking.
What to Do If You Clicked a Phishing Link
If you entered bank details, contact your bank straight away using the number on the back of your card, or call 159, which connects you to most UK banks. Acting quickly can stop money leaving your account.
- Change your password for the account you entered, and for any other account that uses the same password.
- Turn on two-step verification (2FA) for your email, bank and social media accounts.
- Run a security scan on your device if you downloaded a file.
- Report the scam to Report Fraud, the UK’s national fraud reporting service, if you lost money or gave away personal details. In Scotland, contact Police Scotland on 101.
- Watch your accounts for unusual activity over the next few weeks.
How to Report Phishing in the UK
- Emails: forward them to report@phishing.gov.uk, the National Cyber Security Centre’s Suspicious Email Reporting Service.
- Text messages: forward them to 7726, which is free on most UK networks.
- Fake websites and adverts: the GOV.UK guide to reporting scams explains where to report them.
How to Protect Yourself From Phishing
- Use a different, strong password for each important account, and a password manager to remember them.
- Turn on two-step verification wherever you can.
- Keep your phone, computer and apps up to date.
- Use your email provider’s spam filter and “report phishing” button.
- Never share one-time passcodes sent by text, even with someone claiming to be from your bank.
If your Wi-Fi or internet connection is causing problems while you check your accounts, our guide to fixing Wi-Fi that is connected but has no internet can help.
Frequently Asked Questions
How can you tell if an email is phishing?
Check the sender’s full address, look for urgent threats, generic greetings, spelling mistakes and suspicious links, and be wary of any request for passwords or payment details.
What happens if I open a phishing email?
Opening an email is usually safe on its own. The risk comes from clicking links, opening attachments or replying with your details.
Where do I report phishing emails in the UK?
Forward them to report@phishing.gov.uk. Forward scam text messages to 7726.
Can phishing emails come from real addresses?
Yes. Scammers sometimes hack real accounts or spoof addresses, so always check the content and contact the company directly if you are unsure.
What should I do if I gave my bank details to a scammer?
Contact your bank immediately using the number on your card or by calling 159, change your passwords and report the scam to Report Fraud.
Final Thoughts
Phishing emails are designed to look real, but most share the same warning signs: pressure to act fast, strange sender addresses, generic greetings and requests for your details. Slow down, check before you click, contact companies through their official channels, and report anything suspicious. A few seconds of caution can protect your money and your accounts.
