Emails are part of everyday digital life. But not every message actually comes from the sender listed. Scammers use phishing emails to steal sensitive information or trick you into making payments. These messages often look deceptively real. In this article, we explain in simple terms how to spot phishing emails, how to safely verify suspicious requests, and what to do if you’ve already entered your login credentials.
What Is a Phishing Email?
A phishing email often looks like an ordinary email: an invoice, a delivery notification, or a notice about a locked mailbox. That’s what makes these messages convincing. If you’re expecting a package or managing a website, you may assume the email relates to something you need to do. Therefore, pay close attention to what the email is asking you to do.
Common Signs of a Phishing Email
Time pressure is a common warning sign. Phrases like “final reminder” or “account will be blocked today” are meant to prevent you from taking the time to verify the information. Unexpectedly large refunds and unexpected security warnings can also serve as pretexts. However, one warning sign alone does not necessarily mean an email is fraudulent.
View the full sender details. The displayed name “Customer Service” does not reveal the actual email address behind it. Look for additional words or swapped letters in the domain. However, a sender address that looks legitimate does not guarantee safety: even a genuine account can be compromised. If you receive an unusual invoice from a known contact, verify it using a phone number you already have on file.
A personalized greeting and correct spelling are also no guarantee of a message’s authenticity. Scammers may know your name and write convincing messages. Conversely, a message with a generic greeting isn’t automatically a scam attempt. What matters is the overall picture, including the context, the sender, and the requested action.
How to Safely Assess Suspicious Links and Attachments
On a computer, you can hover your mouse pointer over a link without clicking it. The email program often displays the destination address. If you can’t reliably identify it, don’t click the link. On a smartphone, it’s usually easier to open the familiar app directly rather than examining a link preview.
In the case of yourbank.example.secure-login.invalid, yourbank is merely part of an unrelated address. Seeing your bank’s name at the beginning of a URL does not mean the link leads to your bank’s website. Even an encrypted HTTPS connection does not guarantee that the website belongs to a reputable company. Therefore, open a trusted website yourself in a new browser window if you want to verify a request.
Treat unexpected attachments with the same caution. A purported invoice does not become credible simply because it is labeled as a PDF. Do not enable macros or additional features if an unexpected document prompts you to do so. A QR code in an email deserves the same scrutiny as a link: it can also lead to a fake website.
Four Common Examples of Phishing Emails
All of the following messages are fictional training examples. They illustrate typical fraud patterns and do not refer to current incidents involving specific providers.
“Your hosting expires today. Pay 4.99 euros immediately, or your website will be deactivated.” This email asks for a small payment while threatening a serious consequence. Use a saved bookmark or type your hosting provider’s website address into your browser, then log in to your customer account and check your contract status and invoices there. If you cannot find a matching payment request, contact support through the official website.
As a customer of ALL-INKL.COM, you can reach our support team at https://all-inkl.com/en/contact. For more information on fake messages claiming to be from ALL-INKL.COM, please see our security guidelines on phishing emails and fake websites.
“Your mailbox is full. Confirm your password to continue receiving messages.” An apparent technical problem is used here to trick you into revealing your email password. As an ALL-INKL.COM customer, you can check how much storage space you are actually using via the official webmail login or in KAS (Technical Administration). Do not reply with your password, and do not enter it on a page you opened via a link in the suspicious email.
“An additional payment of €1.85 is required to release your package.” A small amount can tempt you to open the payment page without checking it first. Instead, verify the tracking number against your order and the delivery company's official app. The fact that you’re actually expecting a delivery doesn’t confirm the message’s authenticity.
“We have changed our bank account information. Please pay the attached invoice to the new account.” In a business context, such a message may look like normal business correspondence. Confirm any changes to payment details with a contact you already know, using a separate communication channel. Do not use a new phone number provided in the same email for this purpose.
What Should You Do After Receiving a Suspicious Email or Clicking a Link?
If you have not clicked on any links, opened any attachments, or replied to the message, use your email program’s reporting feature and delete the message after preserving any necessary evidence. At work, notify your IT team. Do not forward a suspicious attachment to colleagues without clearly warning them.
If you’ve clicked on a link, close the page and do not enter any further information. A click alone does not prove that your account has been taken over. If files were downloaded or opened, scan the device with up-to-date security software; if it’s a work device, contact the IT department.
If you entered a password, go directly to the service’s official website, preferably from a trusted device, and change it. Also change the password for all other services where you’ve used it. Check active sessions and, for your email account, any forwarding settings as well. To learn how cookies keep you logged in, read our article Cookies on the Web: What’s Behind Them.
If payment details have been exposed or a transfer has been made, contact your bank immediately. Save the message and relevant timestamps as evidence.
In the UK, the government’s website explains how to report suspicious emails, websites and phishing attempts. In the US, you can report fraud to the FTC through ReportFraud.ftc.gov . In Canada, you can report incidents to the Canadian Anti-Fraud Centre . In Germany, the German consumer advice service's Phishing Radar provides information on reporting suspected phishing emails. In other countries, contact your national cybersecurity or fraud reporting service.
Reporting an incident is not a substitute for securing affected accounts immediately. ALL-INKL.COM customers can report spam and phishing emails directly in our webmail. By reporting these emails, you help train our server-side spam filter and improve the detection of unwanted messages.
How to Improve Email Security in Everyday Life
Use a unique password for each account and enable multi-factor authentication. Do not share one-time codes, even if someone asks you to do so by phone or message. Also, do not confirm any login that you did not initiate yourself.
Create bookmarks for webmail, online banking, and hosting sites. For changes to business payment details, it’s worth establishing a standard callback procedure. Such habits are especially helpful when you’re under time pressure and a message appears credible at first glance. Keep your browser, operating system, and security software up to date.
Frequently Asked Questions About Phishing Emails
What’s the Quickest Way to Spot a Phishing Email?
Check what action is being requested and whether the reason for it is plausible. Then confirm the request via the familiar app or website.
Can a Phishing Email Have Perfect Spelling and Grammar?
Yes. Good language and a professional layout are not proof that a message is genuine.
Does a Personalized Greeting Mean an Email Is Genuine?
No. Criminals may also know your name and other personal details. Do not rely on the greeting alone.
Are Emails from Known Contacts Always Safe?
No. An account may have been compromised. Verify unexpected attachments and payment requests through another channel of communication.
Is a Link with HTTPS Trustworthy?
HTTPS encrypts the connection. Even a fraudulent website can use HTTPS, which is why you must also verify the actual domain.
Can QR Codes Be Used for Phishing?
Yes. A QR code can open a fake website. If you’re unsure, use the official login for the service in question.
What Can Happen If I’ve Only Opened the Email?
This is not the same as sharing a password. Do not click on any links, and report the suspicious message. If your email app loads external content, such as images, the sender may be able to tell that you’ve opened the message.
Do I Have to Change All My Passwords After Every Click?
Not automatically. If login credentials have been entered or there are signs that an account has been compromised, secure the affected accounts immediately.
Does a Spam Filter Provide Complete Phishing Protection?
No. A filter is a helpful layer of protection, but it can still let some fraudulent messages slip through. Our guide to setting up spam and email filters shows you how to configure protection for your ALL-INKL.COM mailbox.
Should I Reply to a Suspicious Email?
Avoid replying. Verify the facts using known contact information and use the designated reporting channels.
How to Spot Phishing and Respond Quickly
If you want to identify phishing emails, you need a reliable routine for handling unexpected requests. Access important accounts through the familiar app or by typing the website address yourself, and confirm payment changes through known contacts. This way, you can handle legitimate requests without letting an urgent email pressure you into acting. If data has already been shared, the most important thing is to quickly secure the affected account or payment method.
Related topics
Whether you’re shopping online, subscribing to a newsletter or creating a new account, you need an email address almost everywhere. Over time, this ...
Artificial intelligence is developing rapidly. This is opening up more opportunities to automate tasks and make work processes more efficient. So-call...
Two critical security vulnerabilities have been discovered in PHP. They are collectively known as PHP2Shell. Under certain conditions, attackers can e...
