Stay Alert

Email Scam — Recognize Phishing Before It Strikes

Email scams are evolving. From fake invoices to CEO fraud, learn how to spot the warning signs and protect your personal and professional accounts.

Most dangerous email scams

Fake delivery notifications

An email or SMS says you have a package waiting. The link leads to a fake site that steals your credit card details under the guise of paying a small delivery fee.

CEO fraud (BEC)

An email appearing to come from your CEO or manager urgently requests a wire transfer or gift card purchase. Always verify unusual payment requests via a second channel.

Fake invoice ransomware

You receive an invoice for a service you never ordered. The PDF or Excel attachment contains ransomware that encrypts your files and demands payment.

Account suspension threats

An email claiming your Netflix, PayPal, or bank account will be suspended unless you verify your details immediately. The link goes to a perfect copy of the real login page.

Red flags in suspicious emails

Sender address is slightly wrong (e.g., support@amaz0n.com)
Urgent threats: "Account suspended in 24 hours"
Requests for passwords, PINs, or verification codes
Unexpected attachments, especially .zip, .exe, or Office macros
Generic greetings like "Dear Customer" instead of your name

How to protect your inbox

Enable two-factor authentication

2FA prevents attackers from accessing your accounts even if they steal your password. Use an authenticator app, not SMS if possible.

Use unique passwords

A password manager ensures every account has a unique, strong password. If one service is breached, your other accounts remain safe.

Verify before clicking

Hover over links to see the real URL. When in doubt, log in through the official website or app instead of clicking email links.

Check breach status

Regularly check if your email has appeared in data breaches. If so, change that password immediately everywhere you reused it.

Email scams — Frequently asked questions

The most common are phishing (fake login pages), fake invoices with malware attachments, prize scams, impersonation of colleagues or bosses (CEO fraud), and fake delivery notifications.

Verify suspicious emails now

Clairmo checks sender DNS records, breach databases, and reputation scores.

Verify an email
Email Scam — How to Recognize & Avoid Phishing [2026] | Clairmo