How can I tell if a message is a scam?

Check three things before anything else: the sender's full email address rather than the display name, where the links actually point when you hover or long-press them, and what the message is asking you to do. Requests for a password, a payment, a gift card, a verification code, or remote access to your device are scams regardless of how the message looks.

Is it dangerous to open a suspicious email?

Opening a message in a modern email app is low risk. The risk comes from clicking links, opening attachments, enabling content in a document, replying, or calling a phone number in the message.

What should I do if I already clicked or replied?

If you only clicked, close the page and run an antivirus scan. If you entered a password, change it from another device starting with your email account. If you shared card details, call your bank on the number printed on the card. If you sent money, contact your bank the same day and report it at ic3.gov.

Where can I report a scam message?

In the United States, report to the FTC at reportfraud.ftc.gov, forward phishing emails to reportphishing@apwg.org, and forward scam texts to 7726. Report financial losses to the FBI at ic3.gov.

Can someone check a suspicious email for me?

Yes. Forward the original message to check@spamcheck.com and SpamCheck will review the sender, the link destinations, and the wording, then reply in plain English with what looks safe, what looks suspicious, and what to do next.

Is this a scam?

If a message is asking you for money, a password, a code, or access to your device, treat it as a scam until you have checked it independently. Below are the warning signs that matter, followed by a path for each kind of suspicious message people receive.

Warning signs that a message is a scam

Pressure to act within hours, or a threat that an account will be closed
A request for a password, PIN, card security code, or a texted verification code
A demand for payment by gift card, wire transfer, cryptocurrency, or a payment app
A sender display name you recognise attached to an address you do not
Link text and the real link destination that do not match
An unexpected attachment, invoice, or 'secure document'
A phone number in the message that differs from the one on your card or statement
A reference to an order, delivery, refund, or subscription you never had

What kind of message did you get?

An email you cannot place

Start here if you simply cannot tell whether a message is genuine.

A message claiming to be from your bank

Bank alerts are the most imitated messages there are, and often arrive paired with a phone call.

A package or delivery notice

'Delivery failed, pay a small fee' is the most sent scam text in circulation.

A tech-support or antivirus warning

Renewal invoices and 'your PC is infected' pop-ups both aim to get you on the phone.

An account or security alert

Fake sign-in warnings are designed to capture your password and then your verification code.

An invoice or payment request

Invoice fraud works because paying bills is routine. Verify before money moves.

Something aimed at an older parent or relative

Guides for older adults, families, and caregivers — including how to raise it without shame.

You already clicked, replied, paid, or shared something

Find your situation and work through it in order. The first hour matters most.

How to check a message in three steps

Read the sender's full address, not the display name. Anything after the @ symbol that is not the company's real domain settles it.
Reveal the real link destination by hovering on a computer or pressing and holding on a phone. Do not tap.
Verify through a channel you already trust: the company's app, its website typed in yourself, or the number printed on your card.

For the longer version, read how to check whether an email is a scam or browse the full library of scam guides.

Frequently asked questions

How can I tell if a message is a scam?: Check three things before anything else: the sender's full email address rather than the display name, where the links actually point when you hover or long-press them, and what the message is asking you to do. Requests for a password, a payment, a gift card, a verification code, or remote access to your device are scams regardless of how the message looks.
Is it dangerous to open a suspicious email?: Opening a message in a modern email app is low risk. The risk comes from clicking links, opening attachments, enabling content in a document, replying, or calling a phone number in the message.
What should I do if I already clicked or replied?: If you only clicked, close the page and run an antivirus scan. If you entered a password, change it from another device starting with your email account. If you shared card details, call your bank on the number printed on the card. If you sent money, contact your bank the same day and report it at ic3.gov.
Where can I report a scam message?: In the United States, report to the FTC at reportfraud.ftc.gov, forward phishing emails to reportphishing@apwg.org, and forward scam texts to 7726. Report financial losses to the FBI at ic3.gov.
Can someone check a suspicious email for me?: Yes. Forward the original message to check@spamcheck.com and SpamCheck will review the sender, the link destinations, and the wording, then reply in plain English with what looks safe, what looks suspicious, and what to do next.

SpamCheck provides informational risk assessments and cannot guarantee that any message is completely safe. Company names are referenced only to help people identify impersonation; SpamCheck is not affiliated with, sponsored by, or endorsed by them.