How to Spot a Scam Email or Text Message

Every day, millions of fake emails and text messages are sent out by scammers hoping to trick people into handing over personal information or money. These messages can look surprisingly real, but once you know the warning signs, they become much easier to spot.

This guide will show you exactly what to look for, walk you through real examples, and explain what to do if you ever receive one. You do not need to be a technology expert to protect yourself. A few simple habits are all it takes.

If you have not already read our companion guide, Phone Scams Targeting Seniors covers voice call scams and is well worth a look too.

What Is Phishing?

"Phishing" is the name for scam emails or texts that pretend to come from a company or person you trust. The goal is to get you to click a link, open an attachment, or share personal details like passwords, bank account numbers, or credit card information.

The name comes from "fishing" because scammers cast out millions of messages and wait for someone to take the bait. But you are about to learn how to see the hook before it catches you.

8 Warning Signs of a Scam Email

1. The Sender Address Looks Wrong

A real email from Amazon comes from an address ending in @amazon.com. A scam email might come from something like amazon-security@mail-alerts99.com or support@amaz0n-verify.net. Always check the full email address, not just the name that appears at the top of the message.

2. It Creates a Sense of Urgency

Scammers want you to act fast, before you have time to think. Watch out for phrases like "Your account will be suspended in 24 hours," "Immediate action required," or "Respond now or lose access." Legitimate companies rarely threaten you with tight deadlines over email.

3. It Asks for Personal Information

Your bank will never ask you to confirm your password, PIN, or full account number by email. Neither will the tax office, your internet provider, or any other trusted organisation. If an email asks you to "verify" or "confirm" sensitive details, that is a major red flag.

4. The Greeting Is Vague

Real companies that have your account usually address you by name. Scam emails often use generic greetings like "Dear Customer," "Dear Account Holder," or simply "Dear Sir/Madam." If a company you do business with cannot even use your name, be suspicious.

5. There Are Spelling and Grammar Mistakes

While scam emails have become more polished over the years, many still contain awkward phrasing, strange capitalisation, or obvious spelling errors. A message from a major bank that reads "We has detected unusual activitys on you're account" is almost certainly fake.

6. The Links Do Not Go Where They Should

Before clicking any link, hover your mouse over it (on a computer) or press and hold it (on a phone) to see the real web address. If an email claims to be from your bank but the link points to something like http://banking-login-secure.fakesite.com, do not click it.

7. There Is an Unexpected Attachment

Be very cautious about opening attachments you were not expecting, especially files ending in .zip, .exe, or .scr. These can install harmful software on your computer. Even a file that looks like a simple document can contain something dangerous.

8. The Offer Sounds Too Good to Be True

"You have won a prize," "You are entitled to an unclaimed refund," or "You have been selected for a special government payment." If you did not enter a competition or apply for anything, you almost certainly have not won anything. Delete the message.

5 Warning Signs of a Scam Text Message

Text message scams (sometimes called "smishing") work the same way as email scams but arrive on your phone. Here is what to watch for:

1. It Comes from a Strange Number

Legitimate delivery companies and banks usually send texts from a short code or a recognisable number. If you receive a text from a random mobile number or a long international number, treat it with suspicion.

2. It Contains a Shortened or Odd-Looking Link

Scam texts often include links like bit.ly/2xYz or other shortened web addresses that hide where they really lead. If you are not sure, do not tap the link. Instead, open your web browser and go directly to the company's website yourself.

3. It Claims a Delivery Is Waiting

One of the most common text scams pretends to be from a delivery company like Royal Mail, USPS, FedEx, or UPS. The message says a package could not be delivered and asks you to click a link to reschedule or pay a small fee. If you are not expecting a parcel, ignore it. If you are, check the tracking directly on the delivery company's official website.

4. It Asks You to Act Immediately

Just like email scams, text scams create urgency. "Your account has been compromised, click here now" or "Reply within 2 hours to avoid a charge." Take a breath. No real company will punish you for taking time to verify a message.

5. It Asks You to Reply with Personal Details

No legitimate company will ask you to text back your password, bank details, or national insurance number. If a text asks for this information, it is a scam. Full stop.

Real Examples of Common Scams

Understanding what these scams actually look like makes them much easier to recognise. Here are three of the most common ones:

The Fake Amazon Email

Subject line: "Your Amazon order has been placed - $847.99"

The email claims a large purchase has been made on your Amazon account and includes a button labelled "Cancel This Order" or "Report Unauthorised Purchase." The button leads to a fake website that looks like Amazon but is designed to steal your login details.

What to do: Do not click anything in the email. Open a new browser window, go to amazon.com (or amazon.co.uk) yourself, and log in to check your real orders. If there is no such order, the email was fake.

The Fake Bank Alert

Subject line: "Unusual activity detected on your account"

The email appears to come from your bank and says your account has been temporarily locked. It asks you to click a link and enter your login details to "verify your identity." The website looks almost identical to your real bank's site, but the web address is slightly different.

What to do: Never click a link in an email claiming to be from your bank. Instead, call the number on the back of your bank card, or visit your bank's website by typing the address directly into your browser.

The Fake Delivery Text

Text message: "Royal Mail: Your parcel is waiting for delivery. Please confirm your address and pay the $1.50 redelivery fee here: [link]"

This text is designed to get you to enter your card details to pay a tiny fee. Once scammers have your card number, they can use it to steal much more.

What to do: Delete the text. Royal Mail, USPS, and other postal services do not send texts asking for payment through random links. If you are expecting a delivery, check tracking on the official website.

What to Do If You Already Clicked a Link

First of all, do not panic. It happens to people of all ages and all levels of experience. Here is what to do straight away:

If you entered a password, change that password immediately. If you use the same password on other sites, change those too. This is the most urgent step.
If you entered bank or card details, call your bank right away using the number on the back of your card. They can freeze your account and prevent any fraudulent transactions.
Run a security scan on your device. If you have antivirus software, run a full scan. On a phone, make sure your software is up to date.
Watch your accounts closely for the next few weeks. Look for any transactions you do not recognise and report them to your bank immediately.
Tell someone you trust. Whether it is a family member, a friend, or a neighbour, talking about it helps you take the right steps and there is absolutely no shame in it.

How to Report Scams

Reporting scams helps protect other people from falling victim too. Here is how to do it depending on where you live:

In the United States

Forward scam emails to the Anti-Phishing Working Group at reportphishing@apwg.org
Forward scam texts to 7726 (SPAM). This works with most mobile carriers.
Report to the FTC (Federal Trade Commission) at reportfraud.ftc.gov
Report identity theft at identitytheft.gov if your personal information was compromised

In the United Kingdom

Forward scam emails to report@phishing.gov.uk (the National Cyber Security Centre)
Forward scam texts to 7726. This works on all major UK networks.
Report to Action Fraud at actionfraud.police.uk or call 0300 123 2040
Report to your bank if any financial details were shared

Simple Habits to Keep You Safe

You do not need to memorise every scam out there. Instead, build these simple habits:

Never click links in unexpected emails or texts. If you want to check something, open your browser and go to the website yourself.
Check the sender's full email address, not just the display name.
When in doubt, ask someone. A family member, friend, or even your bank can help you decide if a message is real.
Keep your devices updated. Software updates often include security fixes that protect you from the latest threats.
Use strong, different passwords for each of your important accounts. A password manager can help with this.

You Are Stronger Than the Scammers

Scammers rely on fear, urgency, and confusion. Now that you know their tricks, you have taken away their biggest advantage. Trust your instincts. If something feels wrong, it probably is. Take your time, verify before you act, and never be embarrassed to ask for help.

Every scam you spot and delete is a small victory. And by sharing what you have learned with friends and family, you help protect them too.

For more on staying safe, read our guide on phone scams targeting seniors, which covers the voice call tricks scammers use and how to handle them confidently.