The Tech Grandkid · thetechgrandkid.com/guides/email-spoofing/
An email looks like it's from someone you know or a real company. It might be faked.
The name at the top of an email can be faked. Here's how to check before you click or pay anything.
This page is for you if
- An email from a friend or family member asks for money or gift cards
- An email from your bank or a store says there's a problem with your account
- An email has an invoice you don't recognize
Why this happens
The FBI says scammers disguise an email address or sender name, often by changing one letter or number, so it looks like it's from your boss, a company you use or family. The FTC says a real company won't email you a link to update your payment information.
Do these steps
-
Step 1: Look at the real address
Tap or click the sender's name to see the full email address. Look for small changes, like a number 1 in place of a letter l.
-
Step 2: Don't click links or open attachments
The FTC says links and attachments in these emails can install harmful software.
-
Step 3: Check with the person or company
Call your friend at the number you already have. For a company, use a phone number or website you know is real, not the one in the email.
-
Step 4: Report it
In Gmail on a computer, open the email, click More (three dots) next to Reply, then click Report phishing. You can also forward phishing emails to reportphishing@apwg.org.
Already clicked or replied?
- If you shared your Social Security, credit card or bank number, go to IdentityTheft.gov for the steps to take.
- If you opened an attachment or link, update your security software and run a scan.
- Report it to the FTC at ReportFraud.ftc.gov.
Check it with the source
We wrote these steps from these official pages. If your screen looks different, the official page is always right.
- FBI: Spoofing and Phishing https://www.fbi.gov/how-we-can-help-you/common-frauds-and-scams/spoofing-and-phishing
- FTC: How to recognize and avoid phishing scams https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams
- Google: Avoid & report phishing emails (Gmail Help) https://support.google.com/mail/answer/8253?hl=en
Still stuck?
Tell Buster what you see, in your own words.
Or email us at buster@thetechgrandkid.com. Never send us a password or a code.